CSIRT Incident Responder

Job description

Introduction

At IBM, work is more than a job - it's a calling: To build. To design. To code. To consult. To think along with clients and sell. To make markets. To invent. To collaborate. Not just to do something better, but to attempt things you've never thought possible. Are you ready to lead in this new era of technology and solve some of the world's most challenging problems? If so, let's talk.

Your role and responsibilities

The Incident Response and Forensics role will be based in Singapore. The Cybersecurity Incident Response Team (CSIRT) manages security incidents, leads investigations, and remediates threats to systems and data. The cybersecurity specialist works in Incident Response and/or Digital Forensics. As an Incident Responder, you handle security incidents from intake through triage, protection and remediation. You communicate effectively with business and technical teams across the company, including executive management, as well as corporate functions.

You conduct meetings with stakeholders to facilitate the exchange of information, agree on and track the completion of actions, and document the findings and lessons learned. Working with global teams across the company, you ensure that security incidents are handled in a timely and professional manner and contribute to the ongoing improvement of IBM’s overall IT security posture.

Required technical and professional expertise

Incident Responder:

• Experience with incident management and understanding of security incident management standards and best practices.
• Strong oral and written communications skills in English, and any additional languages are a plus.
• Strong interpersonal and organizational skills.
• Knowledge of common security threats, attack vectors and penetration techniques.
• Knowledge of Unix shell and common scripting languages for data manipulation. Preferred technical and professional experience
• At least two years’ experience in Incident Response and/or Digital Forensics in a global enterprise.
• At least one Information Security Professional Certification (e.g. CISSP, GIAC, CFCE, CCE, DFCP, GCIH).
• Familiarity with IBM Resilient is a plus. IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.