Cybersecurity Incident Response (Austin, Tx)

Do you have a passion for the cybersecurity industry? Do you see yourself taking on the role of a critical member of a response team that will be charged with leading and managing investigations? Are you a critical thinker that loves applying a combination of technical knowledge along with incredible organization and communications skills to investigate cyber incidents? Can you work within an ever changing environment and landscape? If so, please read on.Incident response professionals undergo extensive training that equips them to respond to cybersecurity incidents. In case of a data breach or similar event, an incident responder needs to engage the appropriate stakeholders, perform triage, work with an Incidence Response Analyst (as needed) to drive containment and remediation actions, and document root cause analysis (RCA) findings. In this role, you need extensive training and experience in engaging and communicating with all levels of stakeholders across the enterprise and managing cases from start to finish in an expeditious manner.In this role, you will initiate and lead the case investigation, engaging the reporter and appropriate stakeholders to determine the scope, timeline, and potential impact or risk to IBM and/or IBM clients.You will work with an Analyst, as needed, to ensure the issue is contained, short or long-term remediations actions are defined and assigned ownership, and the root cause of the issue/event is documented.This role has high visibility and requires regular interactions with business executives, business unit security focals, Cybersecurity Legal, Corporate Security, Data Privacy Leaders, Corporate Communications, and Human Resources, etc. Therefore, you will need to have excellent communication skills.In addition, since the case records may be used for audits, Executive reporting, and potentially for litigation, you will need to document the case status and evidence thoroughly, accurately, and consistently throughout the case lifecycle.Please be advised that this role, once onboarded and trained, will require off shift work and weekend rotation. In cybersecurity there is no off time!