Cyber Defender

IBM

Confirmed live yesterday High trust

Quick summary

Work type: On-site
Location: Fort Meade, MD
Posted: 16 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

How this pay compares to similar roles

Similar $151k

$105k most similar roles pay here $197k

This listing doesn't post a salary. Most similar roles pay $126,200–$175,051.

Based on 239 similar postings.

Employer

About IBM

IBM is a US-based global technology company providing hybrid cloud, AI, consulting, enterprise software, and IT infrastructure products and services.

IBM currently has 506 open roles on FindRole.

Listed pay typically runs $174,632–$197,165 across 5 roles with salary data.

Most-posted roles

View all roles at IBM

At a glance

TL;DR · Cyber Defender

Role Posting Log in to save

As a Cyber Defender, you will join the IBM Consulting team to safeguard digital infrastructure by identifying, analyzing, and mitigating cyber threats. You will perform day-to-day tasks including investigating security incidents using SIEM, SOAR, EDR, and XDR platforms while applying industry frameworks like MITRE ATT&CK and the Cyber Kill Chain. Your role involves managing incident reports, providing actionable recommendations to improve security posture, and analyzing network and endpoint events across Windows, MAC, and Linux systems. You will also engage in vulnerability management and cyber threat intelligence activities. The position requires an active TS/SCI clearance and familiarity with security technologies. Preferred skills include proficiency in scripting languages like Python, PowerShell, or Bash, as well as knowledge of cloud security principles and experience with threat intelligence platforms to anticipate and counter adversary tactics effectively.

Skills

SIEM SOAR EDR XDR MITRE ATT&CK Cyber Kill Chain Windows Linux Vulnerability Management Python PowerShell Bash Cloud Security Threat Intelligence Hybrid Cloud AI

What you'll do

Investigate security incidents using SIEM, SOAR, EDR, and XDR platforms.
Apply MITRE ATT&CK and Cyber Kill Chain frameworks to counter adversary tactics.
Prioritize and manage incident reports while providing actionable recommendations to clients.
Analyze network and endpoint logs across Windows, MAC, and Linux systems.
Participate in vulnerability management and cyber threat intelligence activities.
Identify and mitigate potential threats to the organization's digital infrastructure.

What we're looking for

High School Diploma or GED required.
Bachelor's Degree (preferred).
Active TS/SCI security clearance required.
US Citizenship required.
Familiarity with SIEM, SOAR, EDR, and XDR platforms to monitor and respond to incidents.
Knowledge of industry frameworks such as MITRE ATT&CK and the Cyber Kill Chain.
Ability to interpret security tools and logs from Windows, MAC, and Linux systems.
Experience in vulnerability management, threat intelligence, and familiarity with scripting languages or cloud security (preferred).

Save