Security Consultant - UEBA Platform Engineering & Ops

-------------------------Key Responsibilities The UEBA Administrator's responsibilities: * Deployment and Configuration: * Installing and setting up UEBA platforms and related components.
* Integrating UEBA solutions with various data sources (e.g., SIEM, Active Directory, network devices, applications, cloud services, endpoint logs) to ensure comprehensive data ingestion.
* Defining and configuring behavioral baselines for users and entities, utilizing machine learning algorithms. * Monitoring and Analysis: * Continuously monitoring UEBA dashboards and alerts for deviations from established baselines.
* Analyzing anomalous activities to determine their risk level and potential impact.
* Investigating security incidents triggered by UEBA alerts, collaborating with SOC teams and other security personnel.
* Performing threat hunting activities using UEBA insights to proactively identify hidden threats. * Rule and Policy Management: * Developing, refining, and implementing correlation rules and policies within the UEBA platform to enhance threat detection accuracy.
* Tuning the system to minimize false positives and ensure high-fidelity alerts.
* Automating response actions where appropriate, such as locking accounts or blocking access. * System Maintenance and Optimization: * Performing regular health checks, upgrades, and patching of the UEBA infrastructure.
* Optimizing the performance and efficiency of the UEBA solution.
* Documenting configurations, procedures, and incident response playbooks related to UEBA. * Reporting and Compliance: * Generating reports on user and entity behavior, detected anomalies, and security posture.
* Assisting with compliance requirements by providing data and insights from UEBA.
* Staying updated with the latest threat landscape and UEBA capabilities.-------------------

Required education

Bachelor's Degree

Preferred education

Bachelor's Degree

Required technical and professional expertise

------Required Skills and Qualifications * Technical Expertise: * Strong understanding of UEBA concepts: How machine learning and behavioral analytics are applied to security.
* Proficiency with UEBA platforms: Experience with leading UEBA solutions (e.g., Gurucul UEBA, Splunk UEBA, Exabeam, Fortra, Microsoft Sentinel UEBA, IBM QRadar UEBA).
* Networking Knowledge: Understanding of network protocols, traffic analysis, and common attack vectors.
* Operating Systems: Familiarity with Windows, Linux, and other relevant operating systems.
* Security Information and Event Management (SIEM): Experience with SIEM tools and their integration with UEBA.
* Data Analysis: Ability to work with large datasets, perform data correlation, and extract meaningful insights.
* Scripting/Automation: Knowledge of scripting languages (e.g., Python, PowerShell) for automation and data manipulation is a plus.
* Cloud Security: Understanding of cloud environments and their unique security challenges if applicable. * Analytical Skills: * Critical Thinking: Ability to analyze complex data and identify subtle behavioral anomalies.
* Problem-Solving: Aptitude for troubleshooting and resolving issues related to UEBA systems and security incidents.
* Attention to Detail: Meticulous approach to configuring systems and investigating alerts. * Soft Skills: * Communication: Excellent written and verbal communication skills to articulate technical concepts and findings to both technical and non-technical stakeholders.
* Teamwork: Ability to collaborate effectively with SOC analysts, incident response teams, and other IT departments.
* Continuous Learning: Eagerness to stay abreast of evolving cybersecurity threats and technologies. * Qualifications: * Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.

Preferred technical and professional experience

3-5 yrs exp in managing Gurucul UEBA Platform Administration & Ops

Relevant industry certifications (e.g., CompTIA Security+, Certified Ethical Hacker (CEH), GSEC, vendor-specific UEBA certifications) are highly advantageous. Proven experience in a security operations center (SOC) or a similar cybersecurity role.

ABOUT BUSINESS UNIT

IBM Consulting is IBM's consulting and global professional services business, with market leading capabilities in business and technology transformation. With deep expertise in many industries, we offer strategy, experience, technology, and operations services to many of the most innovative and valuable companies in the world. Our people are focused on accelerating our clients' businesses through the power of collaboration. We believe in the power of technology responsibly used to help people, partners and the planet.

YOUR LIFE @ IBM

In a world where technology never stands still, we understand that, dedication to our clients success, innovation that matters, and trust and personal responsibility in all our relationships, lives in what we do as IBMers as we strive to be the catalyst that makes the world work better.

Being an IBMer means you'll be able to learn and develop yourself and your career, you'll be encouraged to be courageous and experiment everyday, all whilst having continuous trust and support in an environment where everyone can thrive whatever their personal or professional background.

Our IBMers are growth minded, always staying curious, open to feedback and learning new information and skills to constantly transform themselves and our company. They are trusted to provide on-going feedback to help other IBMers grow, as well as collaborate with colleagues keeping in mind a team focused approach to include different perspectives to drive exceptional outcomes for our customers. The courage our IBMers have to make critical decisions everyday is essential to IBM becoming the catalyst for progress, always embracing challenges with resources they have to hand, a can-do attitude and always striving for an outcome focused approach within everything that they do.

Are you ready to be an IBMer?

ABOUT IBM

IBM's greatest invention is the IBMer. We believe that through the application of intelligence, reason and science, we can improve business, society and the human condition, bringing the power of an open hybrid cloud and AI strategy to life for our clients and partners around the world.

Restlessly reinventing since 1911, we are not only one of the largest corporate organizations in the world, we're also one of the biggest technology and consulting employers, with many of the Fortune 50 companies relying on the IBM Cloud to run their business.

At IBM, we pride ourselves on being an early adopter of artificial intelligence, quantum computing and blockchain. Now it's time for you to join us on our journey to being a responsible technology innovator and a force for good in the world.

IBM is proud to be an equal-opportunity employer. All qualifiedapplicants will receive consideration for employment without regard to race,color, religion, sex, gender, gender identity or expression, sexualorientation, national origin, caste, genetics, pregnancy, disability,neurodivergence, age, veteran status, or other characteristics. IBM is alsocommitted to compliance with all fair employment practices regardingcitizenship and immigration status.

OTHER RELEVANT JOB DETAILS

When applying to jobs of your interest, we recommend that you do so for those that match your experience and expertise. Our recruiters advise that you apply to not more than 3 roles in a year for the best candidate experience. For additional information about location requirements, please discuss with the recruiter following submission of your application.

Client-provided location(s): Pune, India

Job ID: IBM-48951

Employment Type: OTHER

Posted: 2025-07-31T11:49:18