الصفحة الرئيسية قطر Principal Incident Response Consultant

الصفحة الرئيسية قطر Principal Incident Response Consultant

Principal Incident Response Consultant

دوام كامل في IBM في Qatar
نُشرت يوم February 5, 2025

تفاصيل الوظيفة

Your Role and Responsibilities The consultant has strong knowledge of:

  • processes for collecting, packaging, transporting, and storing electronic evidence while maintaining chain of custody.
  • cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).
  • cloud service models (e.g., IaaS, PaaS, and SaaS) and how those models can limit digital forensics and incident response.
  • malware analysis concepts and methodologies.
  • adversarial tactics, techniques, and procedures.
  • system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, SQL injection, race conditions, covert channel, replay, return-oriented attacks, malicious code).
Introduction As a Senior Incident Response Consultant at IBM X-Force Incident Response, you will be responsible for handling and coordinating cyber incidents across our clients' enterprise environments. During a cyber incident, Senior IR Consultants are responsible to ensure engagement objectives are met or exceeded, and coordinate and lead junior consultants in the response effort. A Senior Incident Response Consultant can communicate effectively with analysts, technical teams, and other stakeholders to deliver excellence in responding to and resolving incidents. You are expected to be both a technical expert but also able to orchestrate the analysis tasks of interest to a diverse body of stakeholders, many of whom will not have a strong technical background. Required Technical and Professional Expertise Hands-on experience in Incident Management roles that required the ability to convey complex technical matters with analysis tasks and other relevant teams (Threat Intelligence, Malware Analysis, etc.). Considerable expertise leading incident response investigations, from triage/kickoff through to post-incident remediation. Highly skilled in:
  • identifying, capturing, containing, and reporting malware.
  • recognizing and categorizing types of vulnerabilities and associated attacks.
  • using endpoint detection and response (EDR) tools (e.g., Crowdstrike, Cortex, Carbon Black) to detect and respond to security incidents at scale.
  • using log management and event correlation tools (e.g., Splunk, ELK, QRadar).
  • analyzing memory dumps to extract information.
  • using forensic tool suites (e.g., X-Ways, EnCase, Sleuthkit, FTK).
  • recognizing and interpreting malicious activity within network evidence sources.
  • conducting forensic analyses across multiple operating system platforms (e.g., Windows, Linux, macOS).
  • preparing written reports and oral presentations for technical, executive, and legal audiences.
Prior experience in a client-facing Incident Response consultancy role. Fluent in English and Arabic. Preferred Technical and Professional Experience
  • Relevant industry certifications (e.g., GCFE, GCFA, CISSP, etc.)
Required Education Associate's Degree/College Diploma Preferred Education Bachelor's Degree About Business Unit IBM Consulting is IBM’s consulting and global professional services business, with market-leading capabilities in business and technology transformation. With deep expertise in many industries, we offer strategy, experience, technology, and operations services to many of the most innovative and valuable companies in the world. Our people are focused on accelerating our clients’ businesses through the power of collaboration. Wonder if IBM is the one for you? In a world where technology never stands still, we understand that dedication to our clients' success, innovation that matters, and trust and personal responsibility in all our relationships, lives in what we do as IBMers as we strive to be the catalyst that makes the world work better. Are you ready to be an IBMer? IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer. Country/Region Qatar State / Province Ar Rayyān City / Township / Village Doha IBM Business Group Consulting Primary job category Consultant Secondary Job Category Other Consultant Role ( Job Role ) Security Consultant Employment Type Full-time OR Part-time Contract type Regular Position Type Professional Travel Required Up to 60% or 3 days a week (home on weekends - based on project requirements) Company (1094) IBM QATAR SSC Is this role a commissionable/sales incentive based position? No ERBP Yes Company Label IBM #J-18808-Ljbffr

Apply safely

To stay safe in your job search, information on common scams and to get free expert advice, we recommend that you visit SAFERjobs, a non-profit, joint industry and law enforcement organization working to combat job scams.

Share this job
See All Principal Jobs
تعليقات وملاحظات تعليقات وملاحظات