We are looking for a Security Operations Desk Analyst with a strong foundation in network protocols and network devices (e.g., switches, routers), as well as basic knowledge of Unix/Linux and Windows operating systems. The ideal candidate should be comfortable with network troubleshooting procedures and possess a working understanding of firewalls and IDS/IPS technologies. This role requires excellent written and verbal communication skills in English, as all tasks are performed remotely and involve interaction with clients across the globe. The candidate must be proactive, a fast learner, detail-oriented, and well-organized.
In this role, you'll work in one of our IBM Consulting Client Innovation Centers (Delivery Centers), where we deliver deep technical and industry expertise to a wide range of public and private sector clients around the world. Our delivery centers offer our clients locally based skills and technical expertise to drive innovation and adoption of new technology.
We are seeking a Security Operations Desk Analyst to join our elite, globally distributed Security Operations Center (SOC). As a key player on the front lines of cyber defense, you’ll be responsible for monitoring network activity, managing critical incidents, and communicating directly with enterprise clients. This is more than just a technical support role—it's a high-impact position where your insights, decisions, and problem-solving skills will help protect global organizations from sophisticated cyber threats.
Responsibilities:
Monitor and escalate security incidents in real-time.
Perform first-level investigations—network checks, logs, and root-cause analysis.
Coordinate with internal SOC teams to support client-facing incident triage.
Use problem-solving techniques to resolve or escalate technical issues.
Lead communication during Sev1/P1 incidents with global stakeholders.
Apply basic AI concepts (e.g., prompt engineering) in workflows.
Utilize tools like ServiceNow to manage tickets and track issues.
Stay current with SIEM, IDS/IPS, and evolving threat landscapes.
Requirements:
Strong experience in IT or security operations
Fluent English (written and verbal)
Experience in client-facing roles (SOC, Help Desk, etc.)
Strong communication skills and technical documentation
Network security knowledge (firewalls, IDS/IPS, protocols, topologies)
Experience with critical incident response and triage
Problem-solving mindset with technical troubleshooting
Basic understanding of ITIL concepts (incidents, requests, changes)