Technical Operations Analyst

IBM

Confirmed live yesterday High trust

Quick summary

Work type: On-site
Location: Fort Meade, MD
Posted: 9 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

How this pay compares to similar roles

Similar $152k

$121k most similar roles pay here $183k

This listing doesn't post a salary. Most similar roles pay $127,300–$177,249.

Based on 240 similar postings.

Employer

About IBM

IBM is a US-based global technology company providing hybrid cloud, AI, consulting, enterprise software, and IT infrastructure products and services.

IBM currently has 506 open roles on FindRole.

Listed pay typically runs $174,632–$197,165 across 5 roles with salary data.

Most-posted roles

View all roles at IBM

At a glance

TL;DR · Technical Operations Analyst

Role Posting Log in to save

Technical Operations Analyst (TS/SCI) As a Technical Operations Analyst within IBM Consulting, you will safeguard digital infrastructure by identifying, analyzing, and mitigating cyber threats. You will perform day-to-day tasks including conducting event investigations using SIEM, SOAR, EDR, and XDR platforms while applying the MITRE ATT&CK and Cyber Kill Chain frameworks to counter adversary tactics. Your role involves managing incident reports, providing actionable recommendations to improve security posture, and analyzing network and endpoint events across Windows, MAC, and Linux systems. You will also participate in vulnerability management and cyber threat intelligence activities. The position requires an active TS/SCI clearance and DoD 8570/8140 IAT Level II certification. Preferred skills include proficiency in Python, PowerShell, or Bash scripting, knowledge of cloud security principles, and experience with threat intelligence platforms to identify and anticipate emerging threats.

Skills

SIEM SOAR EDR XDR MITRE ATT&CK Cyber Kill Chain Windows Linux Vulnerability Management Python PowerShell Bash Cloud Security Threat Intelligence Security+ CCNA Security CySA+ GICSP GSEC SSCP

What you'll do

Investigate security incidents using SIEM, SOAR, EDR, and XDR platforms.
Apply MITRE ATT&CK and Cyber Kill Chain frameworks to counter adversary tactics.
Prioritize and manage incident reports to provide actionable recommendations for clients.
Analyze network and endpoint logs from Windows, MAC, and Linux systems to identify threats.
Participate in vulnerability management and cyber threat intelligence activities.
Provide technical recommendations to enhance the client's overall security posture.

What we're looking for

High School Diploma or GED is required.
An active TS/SCI security clearance is required.
Active DoD 8570/8140 IAT Level II certification (e.g., Security+, CySA+) is required.
US Citizenship is required.
Experience using SIEM, SOAR, EDR, and XDR platforms to monitor and investigate security incidents is required.
Knowledge of industry frameworks such as MITRE ATT&CK and the Cyber Kill Chain is required.
Ability to interpret security tools and logs from Windows, MAC, and Linux systems is required.
Bachelor's Degree.

Save