Security Consultant

Who We Are

Kyndryl is a market leader that thinks and acts like a start-up. We design, build, manage, and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers, and our communities.

The Role

At Kyndryl, our Security Consultants are game-changers, constantly pushing the boundaries of what's possible and transforming the way our customers do business. We're looking for a talented individual who thrives in a dynamic environment and is ready to take on the challenge of protecting organizations from threats both known and unknown - being the defender of tomorrow’s digital world.

As a Security Consultant, you'll be the guardian of confidentiality, integrity, and availability, ensuring organizations are shielded from the ever-evolving threat landscape. Your expertise will be sought after as you assess, analyze, and implement effective security measures in customer environments, leaving no stone unturned when it comes to safeguarding their most sensitive data.

Collaboration will be your forte, as you work closely with clients to understand their unique security requirements and assess their current security posture. Armed with this knowledge, you'll provide expert guidance and recommendations on the best security practices, risk management strategies, and robust security policies that will fortify their defenses.

You won't stop at providing advice; you'll roll up your sleeves and get hands-on. Designing and implementing security controls, policies, and procedures will be your playground. You'll work alongside cross-functional teams to deploy state-of-the-art technologies, including firewalls, intrusion detection/prevention systems, access controls, and encryption technologies, ensuring a comprehensive security framework.

The thrill of uncovering vulnerabilities and risks is what motivates you. Armed with your extensive knowledge, you'll conduct thorough security assessments, leaving no stone unturned in identifying potential security breaches. Your findings will serve as the foundation for meticulous security audits and reviews, ensuring adherence to policies and procedures. Your reports and findings will be the catalyst for management decisions and actions.

In the fast-paced world of cybersecurity, staying ahead of the game is crucial. That's why you'll continuously immerse yourself in the latest security threats, technologies, and best practices. Your recommendations will drive enhancements to the organization's security posture, ensuring it remains at the cutting edge of defense.

Not only will you make an impact within our organization, but you'll also collaborate with customers and vendors on security assessments, audits, and due diligence activities. Your knowledge and experience will be instrumental in shaping secure collaborations and partnerships.

Your Future at Kyndryl

As a Security Consultant at Kyndryl you will join the Kyndryl Consultant Profession, working with other Kyndryl Consultants, Architects, Project Managers, and cross-functional Technical Subject Matter Experts - presenting unlimited opportunities with unmatched support through our investment in your learning, training, and career growth

Who You Are

SE REQUIERE:
Experiência de 2 a 5 años en el ámbito de la seguridad de infraestructuras.

Conocimientos avanzados de alguna solución SIEM (Qradar, Securonix, Splunk, Devo, ArcSight, Fortisiem, LogRythm).

Capacidad de hacer desarrollos internos en scripts (en Bash y Python principalmente) para mejorar la respuesta a incidentes.

Dominio de Sistemas Operativos tipo *nix.

Conocimientos de arquitecturas de red.

Experiência en respuesta a incidentes de seguridad, las siguientes tareas:
Diseño de playbooks

Creación y modificación de alertas y casos de uso de seguridad.

Investigación de alertas de seguridad.

Ejecución directa de acciones en dispositivos de TI.

Definición de estrategias de remediación.

Actualización e integración de fuentes SIEM.

Orquestación y automatización de la respuesta a incidentes (SOAR).

Liderazgo y coordinación de incidentes de seguridad (ataques externos e internos, war-rooms, escalaciones, definición de planes de acción...)

Redacción de informes post-mortem.

Diseño de procedimientos y mejora continua.

Experiência en usos de herramientas de activos y evaluación de seguridad (Shodan, Nmap, Qualys, Nessus, Accunetix, etc.)

Experiência en el uso del marco de trabajo Mitre ATT&CK (se valorará Cyber Kill Chain y Diamond Model).

SE VALORARÁ:
Experiência de al menos 2 años en servicios SOC administrando alguna de estas tecnologías UEBA, EDR, XDR, escaneo vulnerabilidades...

Experiência en administración de elementos de seguridad perimetral (FW, WAFS, IDS, IPS,...)

Conocimientos de plataformas the Threat Intelli