[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All IBM jobs](https://jobs.opennash.com/companies/ibm/) · [Search jobs](/search/) IBM · Taguig City, PHL # L3 Threat Response Analyst Taguig City, PHL Listed on IBM’s official careers site. Posted October 12, 2026. Check that it is still open and apply there. [Apply on IBM’s careers site →](https://ibm.dejobs.org/jobs/F20065A2F7F147E58469F3839659CFE8/) [OpenNash Jobs](https://jobs.opennash.com/) / [IBM](https://jobs.opennash.com/companies/ibm/) / L3 Threat Response Analyst ## Job description ### Introduction A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences. ### Your role and responsibilities As a Senior Threat Response Analyst you will be responsible for conducting advanced incident investigations, responding to critical security threats, and driving containment and remediation efforts. The ideal candidate has hands-on experience with multiple security technologies, including SIEM, IDS, APT, and WAF, forensic analysis, and is adept at handling sophisticated cyber threats such as botnets and advanced persistent threats (APTs). Incident Response and Digital Forensic - Provide incident investigation as per Security Incident Management Process / Guidelines. - Drive containment strategy during incidents escalated by the triage team. - Investigate and resolve advanced vector attacks such as botnets and advanced persistent threats (APTs). - For critical incidents, be part of CSIRT activities and execute the incident handling process. - Coordinate with IT, security operations, and other teams for remediation and trigger forensic processes as appropriate. - Perform Root Cause Analysis (RCA) for security incidents and update knowledge management. - Work directly with data asset owners and business response plan owners during high-severity incidents. ### Client Management - Engage with clients during debrief meetings to address questions, gather feedback, and align on security objectives. - Provide tuning recommendations for IDS, proxy policies, and in-line malware tools based on threat feeds, trust and reputation data, incidents, or vulnerabilities and exploits of downstream systems. - Provide tuning recommendations to administrators based on findings from investigations or threat information reviews. - Prepare and deliver comprehensive weekly and monthly Threat Incident debrief reports for clients, including insights on security trends, incidents, system performance, and recommendations. ### Required technical and professional expertise Security Domain Experience: - More than five years of experience in SOC, Incident Response, or Threat Hunting roles. - Hands-on experience with SIEM platforms such as IBM QRadar, Splunk, ArcSight, Microsoft Sentinel, or LogRhythm. - Strong knowledge of network security, log analysis, malware analysis, and forensic investigation techniques. - Knowledge of Digital Forensics, including disk imaging, memory forensics, log analysis, and evidence handling best practices. - Familiarity with cyber threat intelligence frameworks like MITRE ATT&CK, NIST, and CIS. - Expertise in network and endpoint security monitoring tools (IDS, firewalls, EDR, proxy, email security solutions). - Proficiency in log analysis, regular expressions (regex), and scripting languages like Python or PowerShell. - Ability to create custom threat detection rules, SIEM dashboards, and correlation policies. - Knowledge of packet capture and traffic analysis tools (Wireshark, Zeek, TCPDump). - Familiarity with incident response methodologies and forensic investigation procedures. ### Soft Skills - Strong analytical and problem-solving abilities with keen attention to detail. - Excellent communication and collaboration skills, with the ability to interact effectively with stakeholders at all levels. - Capable of managing multiple priorities in a fast-paced, dynamic environment. ### Preferred technical and professional experience Preferred Certifications - GIAC Certified Incident Handler (GCIH) - GIAC Certified Forensic Analyst (GCFA) or GIAC Certified Forensic Examiner (GCFE) (Preferred for Digital Forensics) - Certified Ethical Hacker (CEH) - Certified SOC Analyst (CSA) - Security+ / CISSP / CISM - SIEM-Specific Certifications (IBM QRadar, Splunk, etc.) IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status. ## At a glance - Posted by the employer: Oct 12, 2026 - First seen by OpenNash: Oct 19, 2026 - Last checked: Oct 19, 2026 - Listed for: 7 days - Location: Taguig City, PHL[Apply on IBM’s careers site →](https://ibm.dejobs.org/jobs/F20065A2F7F147E58469F3839659CFE8/) ## More jobs at IBM ### [Identity Threat Detection & Response (ITDR) Analyst](https://jobs.opennash.com/companies/ibm/jobs/ff2c6d3865bbc27e8ad1/) Taguig City, PHL ### [Senior Cyber Security Platform Engineer](https://jobs.opennash.com/companies/ibm/jobs/883a77876e490ee6cb10/) Taguig City, PHL ### [Senior Cybersecurity Solutions Architect](https://jobs.opennash.com/companies/ibm/jobs/c08889e6698d577db73d/) Taguig City, PHL ### [2027 FLDP Summer Intern](https://jobs.opennash.com/companies/ibm/jobs/b071fbeb6a6f52cf8a18/) Armonk, NY ### [2027 Incentives Professional Intern](https://jobs.opennash.com/companies/ibm/jobs/6d69963066abde4be771/) Armonk, NY ## Similar jobs at other companies ### [Cyber Threat Response Analyst | Adversary Operations](https://jobs.opennash.com/companies/macquarie-group/jobs/e6997360b793009bb6b3/) Macquarie Group Limited · Sydney ### [Lead Threat Response Operations Analyst](https://jobs.opennash.com/companies/pfizer/jobs/f6e6959a4094907066c6/) Pfizer · United Kingdom - Sandwich ### [Threat Analyst](https://jobs.opennash.com/companies/ntt/jobs/913c174c4987ecb33ca2/) NTT · Sibiu, Romania ### [Principal Security Research - Microsoft Defender ( Identity Threat Detection and Response)](https://jobs.opennash.com/companies/microsoft/jobs/99bc96c1970168da1ea4/) Microsoft · Israel, Multiple Locations, Southern, Beer-Sheva, Tel Aviv, Herzliya, Haifa, Northern, Nazareth ### [Investigations and Response Operations Lead, Cyber Threat Incident Response](https://jobs.opennash.com/companies/macquarie-group/jobs/02e0266b7abff4ba52f5/) Macquarie Group Limited · Houston OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)