Security Consultant

**Why Kyndryl**

Our world has never been more alive with opportunities and, at Kyndryl, we’re ready to seize them. We design, build, manage and modernize the mission-critical technology systems that the world depends on every day. Kyndryl is at the heart of progress — dedicated to helping companies and people grow strong. Our people are actively discovering, co-creating, and strengthening. We push ourselves and each other to seek better, to go further, and we carry this energy to our customers. At Kyndryl, we want you to keep growing, and we’ll provide plenty of opportunities to make that happen.

**Your Role and Responsibilities**

The security consultant support clients in advice, implement, and maintain EDR, XDR, SIEM, Deception and SOAR solutions to mitigate security risks (e.g., insider and external threats, intentional and accidental). Position is for an experienced security professional with demonstrated experience within EDR, XDR, SIEM, Deception and SOAR solutions and Zero Trust architecture.
- Advise clients on how to best define and implement detection and correlation rules based on Zero Trust core principals of no trust and always verify and identified business risks.
- Development of high-level and low-level detection and response architecture designs and take ownership of end-end technical delivery of detection and response implementation work for client and ensure what's sold is getting delivered to satisfaction of client.
- Perform detection and response maturity assessments and have experience in formulating roadmaps to bridge existing security gaps.
- A willingness to go beyond the ordinary to meet and exceed client expectations.
- Support detection and response opportunity creation and development of client presentations and SOWs.
- Establish strong client relationships in key accounts to help progress the Security Services portfolio.
- Contribute content and advice to the offering development process.

**Required Technical and Professional Expertise**
- A minimum of 5 years “hands on” experience assessing, designing, and implementing detection and response solutions.
- Has experience writing complex use case scenarios and correlation rules for multiple detection solutions.
- Has experience writing response playbooks for multiple response solutions.
- Experience in implementing, managing, and/or working a Security Operations Center
- Experience in delivering detection and response maturity assessments including roadmaps to bridge existing security gaps.
- As a technical lead/architect, successfully designed and implemented detection and response solutions that supported clients wider Zero Trust architecture.
- Deep knowledge in Zero Trust Network Access architecture and associated frameworks (E.g., NIST SP 800-207, CISA’s Zero Trust Maturity Model)
- Stakeholder management and interpersonal skills at both a technical and non-technical level.
- Must be willing to travel up to 50%, depending on client requirements.
- Excellent customer service and communication (oral / written) skills required.
- Strong critical thinking and analytical skills and ability to think “out of the box” required.
- Must be able to work independently or with a team, under minimum supervision.
- Bilingual English and French

**Preferred Technical and Professional Experience**
- At least 2-year experience in information security consulting working for International Recognized consulting firms.
- A minimum of 5 years hands on experience with one or more of the following areas:

- Assess, Advise, and Implementation of Splunk solutions including:

- Thorough knowledge of Splunk Enterprise Security, SOAR, and UBA
- Splunk Enterprise Certified Architect
- Splunk Enterprise Security Certified Admin
- Splunk SOAR Certified Automation Developer
- Assess, Advise, and Implementation of Cybereason solutions including:

- Thorough knowledge of EDR, XDR, Endpoint Controls, Mobile
- Assess, Advise, and Implementation of Palo Alto Cortex solutions including:

- Thorough knowledge of Palo Alto XDR, XSOAR, and Xpanse
- Palo Alto Networks Certified Detection and Remediation Analyst (PCDRA)
- Palo Alto Networks Certified Security Automation Engineer (PCSAE)
- Assess, Advise, and Implementation of Deception solutions including:

- Thorough knowledge of Avocado Systems (Protect and Reveal) or Fortinet FortiDeceptor
- Assess, Advise, and Implementation of QRadar solutions including:

- Thorough knowledge of Qradar SIEM, SOAR, NDR, and XDR
- IBM Certified Deployment Professional - Security Qradar

Other certificates:

- CSP certificates (AWS, Azure, GCP)
- Related security certification from ISC2, ISACA, SANS or EC-council.
- Related security certification including SSCP, CEH, CHFI, CCNA, GSEC, OSCP, Network+, Security+ are nice to have.

**Required Education**

Bachelor's Degree

**Preferred Education**

Bachelor's Degree

Kyndryl is committed to creating a diverse environment and is proud to be an equal opportunity emplo