[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All IBM jobs](https://jobs.opennash.com/companies/ibm/) · [Search jobs](/search/) IBM · Taguig City, PHL # Identity Threat Detection & Response (ITDR) Analyst Taguig City, PHL Listed on IBM’s official careers site. Posted October 14, 2026. Check that it is still open and apply there. [Apply on IBM’s careers site →](https://ibm.dejobs.org/jobs/E033AA74679C4E43AFBC2AA0C2D2AC57/) [OpenNash Jobs](https://jobs.opennash.com/) / [IBM](https://jobs.opennash.com/companies/ibm/) / Identity Threat Detection & Response (ITDR) Analyst ## Job description ### Introduction A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences. ### Your role and responsibilities We're looking for an ITDR Security Analyst that will support the daily operational monitoring and incident handling for the ITDR platform. Analyst helps validate detections, execute tuning instructions, and ensure system readiness across Active Directory environments. - Perform daily operational checks of ITDR collectors/connectors, domain connectivity, and platform health indicators. - Monitor alert queues, validate detection accuracy, and escalate credible threats to SOC. - Assist in incident enrichment using ITDR data and alert metadata for SOC use case alignment. - Execute tuning configurations as guided by the Consultant. - Help track false positive trends and document recommendations for future tuning. - Document all configurations and integrations thoroughly for future reference and maintenance. - Monitor platform integrations with other security platforms - Raise technical issues to the Consultant after performing basic checks and log reviews. - Generate weekly reports on alert volumes, false positives, system health, and notable anomalies. - Maintain internal runbooks, procedures, and troubleshooting checklists for operations team reference. Required technical and professional expertise - 1-3 years of experience in security operations or IT systems support with exposure to Active Directory environments. - Working knowledge of Active Directory structure, policies, and authentication processes. - Familiarity with identity-based threats, common AD attack vectors, and indicators of compromise. - Basic understanding of SIEM tools, security alert triage, and log/event analysis. - Ability to follow SOPs, perform health checks, and track operational tasks in a structured way. - Exposure to ITDR solutions (e.g., Semperis, SentinelOne Singularity Identity Posture Management, or similar platforms) is preferred and will be considered a strong advantage. ### Soft Skills - Strong analytical mindset, with attention to detail and problem-solving capabilities. - Effective communication skills for coordination with internal teams and escalation to Stakeholders. Preferred technical and professional experience ### CompTIA Security* Microsoft Certified - Identity and Access Administrator Associate (or equivalent AD-focused certification) ### Microsoft Certified - Security Operations Analyst Associate - Any foundational training or certification in Active Directory administration or security - Any entry-level SOC analyst, ITDR, or cloud security certification IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status. ## At a glance - Posted by the employer: Oct 14, 2026 - First seen by OpenNash: Oct 19, 2026 - Last checked: Oct 19, 2026 - Listed for: 5 days - Location: Taguig City, PHL[Apply on IBM’s careers site →](https://ibm.dejobs.org/jobs/E033AA74679C4E43AFBC2AA0C2D2AC57/) ## More jobs at IBM ### [L3 Threat Response Analyst](https://jobs.opennash.com/companies/ibm/jobs/69ba65533cbda6ff25d1/) Taguig City, PHL ### [Senior Cyber Security Platform Engineer](https://jobs.opennash.com/companies/ibm/jobs/883a77876e490ee6cb10/) Taguig City, PHL ### [Senior Cybersecurity Solutions Architect](https://jobs.opennash.com/companies/ibm/jobs/c08889e6698d577db73d/) Taguig City, PHL ### [2027 FLDP Summer Intern](https://jobs.opennash.com/companies/ibm/jobs/b071fbeb6a6f52cf8a18/) Armonk, NY ### [2027 Incentives Professional Intern](https://jobs.opennash.com/companies/ibm/jobs/6d69963066abde4be771/) Armonk, NY ## Similar jobs at other companies ### [Principal Security Research - Microsoft Defender ( Identity Threat Detection and Response)](https://jobs.opennash.com/companies/microsoft/jobs/99bc96c1970168da1ea4/) Microsoft · Israel, Multiple Locations, Southern, Beer-Sheva, Tel Aviv, Herzliya, Haifa, Northern, Nazareth ### [Security Engineer - Detection Engineering and Threat Modeling](https://jobs.opennash.com/companies/hitachi/jobs/c3cfd9dd44c65c4b330e/) Hitachi · Kraków, Lesser Poland Voivodeship, Poland ### [Identity Threat Detection Engineering Specialist](https://jobs.opennash.com/companies/experian/jobs/27bfbff904cbc9f854b2/) Experian · São Paulo, Brazil ### [Endpoint Detection and Response Specialist - Cyber Defense (f/m/d)](https://jobs.opennash.com/companies/siemens/jobs/f158a8391f1d9e91607b/) Siemens ### [Cybersecurity Threat Detection & Response Engineer](https://jobs.opennash.com/companies/hp/jobs/4e24e1646174d2887a54/) HP · Sant Cugat del Valles, Barcelona, Spain OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)