[IBM Korea] Security Services - Threat Monitoring Analyst - L2

Job description

SOC Threat Monitoring Analyst L2 - 위협 모니터링 분석가 Level 2

본 Position은 SOC(Security Operation Center - 보안관제센터) 내의 보안 위협에 대한 모니터링 및 분석을 담당합니다. 기본적으로 문서화된 절차와 체계에 따라 SIEM 솔루션에서 발생되는 보안 위협 및 이벤트를 모니터링하고 고객사의 내부 시스템을 보안 위협으로부터 보호하는 첫 번째 방어선 역할을 수행합니다. 모니터링 이외에 보안 장비 및 솔루션에서 발생하는 이벤트와 로그들을 분석할 수 있어야 합니다. 때로는 네트워크, PC 및 서버의 로그 파일, 캡쳐된 이미지 파일, 메모리 덤프, 악성코드 등을 분석하여 침해사고 발생 원인을 분석하고, 시스템 취약점 분석 결과를 이해하여 대응책을 마련할 수 있어야 합니다.

필요 경력 및 스킬(Required/Preferred Experience & Skills)
1) SOC (Security Operation Center) 운영 참여 경험 필수 (Level1, Level2, Level3, Intelligence or Threat Analyst. 중 하나 이상), 최소 2년 이상
2) SIEM (Security Information and Event Management) , 보안 솔루션, SOAR 솔루션 (Security Orchestration Automation and Response) 의 보안 경고 이벤트에 대한 모니터링 및 분석 경험 필수, 최소 2년 이상
- Security offence ticket queue 조치 수행
3) 보안 사고 및 대응 (Security Incident Response) 에 대한 경험 및 이해 필수, 최소 2년 이상
- 보안 사고 발생시 필수 분석 데이터 수집, 전파 및 대응 (escalation) 수행
- 보안 사고 해결 및 처리 결과 추적 관리 수행
4) Network security solution (SIEM, F/W, Next-Gen F/W, IPS/IDS, HIPS, WAF, DDoS, etc) 운영, 보안 정책 적용 및 설계 경험 필수
5) 취약점 분석 툴 및 솔루션 운영 경험 필수
6) 전반적인 보안 솔루션(EDR ( Endpoint Detection and Response) , AntiVirus, NAC, DLP, DRM, etc) 에 대한 경험 및 지식 필수
7) 전반적인 보안 컨설팅 및 취약점 점검 서비스 및 절차에 대한 경험 및 지식 필수
8) 전반적인 networking protocol ( TCP/IP, HTTP/HTTPS, FTP, DNS, 등) 에 대한 개념 이해 및 업무 활용 능력 필수
9) 네트워크 트래픽 분석에 대한 관련 지식 및 수행 경험 필수
10) 보안 침해사고 대응 보고서 작성 능력, 업무 절차와 Playbook 개선 및 문서화 경험 및 기술 보유 필수
11) 규제 및 개인 정보 보호 등 보안에 관한 법률에 대한 일반적인 지식 선호
12) 퍼블릭 클라우드 인프라 환경 보안 관제 경험 선호
13) Information Security, IT (Information Technology) 혹은 관련 전공 학사 이상의 학위 소유자

Auto req ID

276966BR
Required Education

Bachelor's Degree
Role ( Job Role )

Security Services Specialist
State / Province

SEOUL TEUGBYEOLSI
Primary job category

Technical Specialist
Company

(0079) IBM Korea, Inc.
Contract type

Regular
Employment Type

Full-Time
ERBP

Yes
Is this role a commissionable/sales incentive based position?

No
Travel Required

No Travel
IBM Business Group

Security
Preferred Education

Bachelor's Degree
City / Township / Village

SEOUL
Being You @ IBM

IBM is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.
Required Technical and Professional Expertise

See above JD.
Country/Region

Korea
Preferred Technical and Professional Experience

See above JD.

Secondary Job Category

Services Specialist
Eligibility Requirements

Fluent in Korea and English.
Position Type

Professional
Early Professional Track

Not Applicable - Professional Hire
Location Statement

For additional information about location requirements, please discuss with the recruiter following submission of your application.
Introduction

At IBM, work is more than a job - it's a calling: To build. To design. To code. To consult. To think along with clients and sell. To make markets. To invent. To collaborate. Not just to do something better, but to attempt things you've never thought possible. Are you ready to lead in this new era of technology and solve some of the world's most challenging problems? If so, lets talk.
Your Life @ IBM

What matters to you when you're looking for your next career challenge?

Maybe you want to get involved in work that really changes the world? What about somewhere with incredible and diverse career and development opportunities – where you can truly discover your passion? Are you looking for a culture of openness, collaboration and trust – where everyone has a voice? What about all of these? If so, then IBM could be your next career challenge. Join us, not to do something better, but to attempt things you never thought possible.

Impact. Inclusion. Infinite Experiences. Do your best work ever.
About Business Unit

IBM is a leading provider of enterprise security solutions. Named by industry analysts as a leader in 12 security market segment categories, IBM Security is a multi-billion dollar business that is rapidly growing. In an industry focused on building walls, IBM Security is focused on creating an open, connected security ecosystem that leverages AI and cloud to help clients improve compliance, stop threats, and grow their business securely.
About IBM

IBM's greatest invention is the IBMer. We believe that progress is made through progressive thinking, progressive leadership, progressive policy and progressive action. IBMers believe that the application of intelligence, reason and science can improve business, society and the human condition. Restlessly reinventing since 1911, we are the largest technology and consulting employer in the world, with more than 380,000 IBMers serving clients in 170 countries.