Incident Response Analyst

Your Role and Responsibilities

The role will be responsible for conducting forensic investigations and analysis in support of cyber incidents that are reported into the CSIRT team. This role will require the ability to triage and conduct thorough examinations of all types of digital media within a heterogeneous environment, the ability to determine containment and/or remediation activities that may be required as well as identify potential threats. In this role, you will report and collaborate with the different areas of Business, as well as providing relevant lesson learned output that can be fed into the IBM threat landscape.

Your Responsibilities

• Conduct examination of digital media (hard drives, network traffic, mobile phones, etc.).
• Capture / analyze network traffic for indications of compromise.
• Review log-based data, both in raw form and utilizing SIEM or aggregation tools.
• Employ best practices and forensically sound principals such as evidence handling and chain of custody.
• Perform live network assessments using leading packet capture and analysis software tools.
• Establish timelines and patterns of activity based on multiple data sources.
• Identify, document and prepare reports on relevant findings.
• Utilize varied forensic software such as FTK, Encase, IEF, etc.
• Effectively communicate with clients to establish timelines, manage expectations, and report findings.

Your Abilities & Skills

• Ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means.
• Ability to accurately and completely source all data used in intelligence, assessment and/or planning products.
• Ability to clearly articulate intelligence requirements into well-formulated research questions and data tracking variables for inquiry tracking purposes.
• Expert-level knowledge of common attack vectors and penetration techniques.
• Solid working knowledge of networking technology and tools, firewalls, proxies, IDS/IPS, encryption.
• Demonstrated knowledge of forensic tools such as Encase, FTK, IEF, SIFT.
• Experience with malware analysis (reverse engineering).
• Ability to successfully lead and facilitate information gathering meetings with client senior-level employees
• Skilled at event analysis and correlation.
• Experience managing large and small scale cyber security incidents.
• Ability to coach and training junior level analysts in industry best practices and methodologies.
• An ability to understand and correlate strategic decisions/methodologies into their practical application at an operational level.

Required education

Bachelor's Degree

Preferred education

Bachelor's Degree

Required technical and professional expertise

Required Technical and Professional Expertise

• At least 5 years experience in IT Security Digital Forensics

• At least 2 years experience in Incident Response in a global corporate enterprise

• Demonstrated understanding of database structures and SQL

• Experience with Linux operating systems

Preferred technical and professional experience

Preferred Technical and Professional Expertise

• Certified in either EnCE, CFCE, CCE, DFCP, GCIA, GCIH, GREM or CSIH

• Strong understanding of networking protocols.

• Experience in fast-paced investigations.

• Experience with programming or scripting languages.

• Familiar with Q-Rader SIEM tool is a plus

• Demonstrated system administration skills.

• Ability to present highly technical information to non-technical audiences.

ABOUT BUSINESS UNIT

IBM Systems helps IT leaders think differently about their infrastructure. IBM servers and storage are no longer inanimate - they can understand, reason, and learn so our clients can innovate while avoiding IT issues. Our systems power the world's most important industries and our clients are the architects of the future. Join us to help build our leading-edge technology portfolio designed for cognitive business and optimized for cloud computing.

YOUR LIFE @ IBM

In a world where technology never stands still, we understand that, dedication to our clients success, innovation that matters, and trust and personal responsibility in all our relationships, lives in what we do as IBMers as we strive to be the catalyst that makes the world work better.

Being an IBMer means you'll be able to learn and develop yourself and your career, you'll be encouraged to be courageous and experiment everyday, all whilst having continuous trust and support in an environment where everyone can thrive whatever their personal or professional background.

Our IBMers are growth minded, always staying curious, open to feedback and learning new information and skills to constantly transform themselves and our company. They are trusted to provide on-going feedback to help other IBMers grow, as well as collaborate with colleagues keeping in mind a team focused approach to include different perspectives to drive exceptional outcomes for our customers. The courage our IBMers have to make critical decisions everyday is essential to IBM becoming the catalyst for progress, always embracing challenges with resources they have to hand, a can-do attitude and always striving for an outcome focused approach within everything that they do.

Are you ready to be an IBMer?

ABOUT IBM

IBM's greatest invention is the IBMer. We believe that through the application of intelligence, reason and science, we can improve business, society and the human condition, bringing the power of an open hybrid cloud and AI strategy to life for our clients and partners around the world.

Restlessly reinventing since 1911, we are not only one of the largest corporate organizations in the world, we're also one of the biggest technology and consulting employers, with many of the Fortune 500 companies relying on the IBM Cloud to run their business.

At IBM, we pride ourselves on being an early adopter of artificial intelligence, quantum computing and blockchain. Now it's time for you to join us on our journey to being a responsible technology innovator and a force for good in the world.

IBM is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, neurodivergence, age, or other characteristics protected by the applicable law. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.

OTHER RELEVANT JOB DETAILS

For additional information about location requirements, please discuss with the recruiter following submission of your application.

Client-provided location(s): Singapore

Job ID: IBM-59462

Employment Type: OTHER

Posted: 2025-09-19T18:49:28