Technical Consultant – Threat Detection & Response

About the role

IBM Consulting is seeking a Technical Consultant specialized in Threat Detection, Response, and Intelligence. You will protect client digital environments by analysing security events, investigating incidents, and applying threat intelligence to mitigate risks.

Key responsibilities

• Perform advanced analysis of security events and logs from multiple data sources.
• Correlate events, conduct deep log reviews, and validate true positives versus false positives.
• Execute incident triage, classification, and prioritisation based on risk and impact.
• Conduct root‑cause analysis to determine how incidents originated and evolved.
• Analyse IOCs, threat vectors and apply threat‑intelligence feeds to enhance detection.
• Identify exploitation signals, vulnerabilities and security gaps.
• Collaborate with the team to tune and optimise SIEM/XDR platforms.
• Manage technical communication and incident escalation following defined procedures.

Required profile

• Strong experience in advanced log and event analysis.
• Proven ability to perform alert correlation, deep investigation and incident validation.
• Hands‑on experience with incident triage, classification and prioritisation.
• Excellent analytical skills for root‑cause analysis.
• Experience analysing malicious behaviours, IOCs and attack vectors.
• Practical knowledge of threat‑intelligence consumption and application.
• Solid understanding of the MITRE ATT&CK framework.
• Strong technical communication skills and experience handling incident escalation.
• Team‑oriented mindset with experience collaborating on SIEM/XDR optimisation.
• Intermediate English level for technical communication.

Required skills

• SIEM/XDR platforms
• MITRE ATT&CK framework
• Windows operating system
• Linux operating system
• Threat‑intelligence feed consumption
• IOC analysis