Senior Security Consultant – Cyber SOC

About the role

IBM Consulting is seeking a Senior Security Consultant to join its Cyber Security Operations Centre (SOC). The role combines hands‑on incident investigation, threat hunting and security assessment with consulting and stakeholder‑management responsibilities across a global client base.

Key responsibilities

• Perform proactive, hypothesis‑driven threat hunting across endpoints, networks, identities, cloud and security telemetry using MITRE ATT&CK and emerging TTPs.
• Analyse SIEM, EDR/XDR, network, authentication, DNS, proxy and firewall logs to detect suspicious activity and advanced threats.
• Lead or support investigations of high‑severity cyber incidents, produce timelines, identify IoCs, root causes and remediation actions.
• Develop, tune and maintain detection use cases, correlation rules and security analytics.
• Conduct threat modelling and security assessments for applications, infrastructure, cloud environments and critical business services.
• Provide consulting advice to technology and business stakeholders, translating technical findings into business‑impact‑oriented risks.
• Prepare executive‑level and technical reports, track remediation actions and contribute to SOC governance.

Required profile

• 8+ years of experience in cybersecurity, with strong background in SOC operations, incident response or threat hunting.
• Analytical mindset with ability to independently handle complex investigations and produce clear, actionable recommendations.
• Excellent client‑facing communication and stakeholder‑management skills across technical and non‑technical audiences.
• Experience working with cross‑functional teams including infrastructure, application, cloud, IAM and risk.

Required skills

• Threat hunting and detection using SIEM, EDR/XDR platforms.
• Incident response, evidence gathering and forensic analysis.
• Threat modelling and security assessment methodologies.
• MITRE ATT&CK framework, IoC/IoA analysis, security log analysis.
• Digital forensics (preferred) and familiarity with forensic tools.
• Relevant certifications such as CISSP, GIAC, CEH, OSCP, Security+.