Cybersecurity- CTI SME (Cyber Threat Intelligence)

Role Overview: At Kyndryl, you will join the Security & Resiliency practice, a critical team dedicated to ensuring enterprises remain secure, available, reliable, and resilient. As a Cybersecurity Infrastructure Professional, you will play a crucial role in maintaining and enhancing the infrastructure that supports cybersecurity operations for Fortune 500 clients. Your responsibilities will include orchestrating infrastructure to protect systems from physical and cyber adversaries, preserving the integrity of IT infrastructure, securing networks, and safeguarding data from unauthorized access and malicious activities. If you have a passion for cybersecurity and enjoy the challenge of protecting critical assets, this role offers you the opportunity to be a cybersecurity hero at Kyndryl. Key Responsibilities: - Collaborate with SOC engineers, architects, and incident responders to document content logic, assumptions, and tuning parameters. - Participate in governance and change management processes, hunting for advanced persistent threats and zero-day exploits. - Monitor threat actor activity, TTPs, and IOCs, leveraging threat feeds from various sources. - Gather and analyze raw data to extract actionable insights and disseminate intelligence to stakeholders. - Produce executive-level dashboards, advise on risk mitigation strategies, and support audits and regulatory reporting. - Work with SOAR and SIEM teams to automate threat detection and response workflows and refine detection logic with SOC analysts and SIEM Engineering Team. Qualifications Required: - 7+ years of experience in CTI SME and working with SOC engineers, architects, and incident responders. - Proficiency in documenting content logic, governance processes, and change management. - Experience in threat hunting, monitoring threat actor activity, and leveraging threat feeds. - Ability to gather, filter, and analyze data to produce actionable insights and executive-level dashboards. - Knowledge of risk mitigation strategies, compliance frameworks, and supporting audits and regulatory reporting. - Collaboration skills to work with SOAR and SIEM teams, SOC analysts, and SIEM Engineering Team. Additional Details: Kyndryl is committed to empowering underserved communities with essential cyber skills and creating a more equitable, inclusive world. When you join Kyndryl, you become part of a legacy focused on innovation, personal growth, and career development through industry alliances, skilling programs, and certification opportunities in Security & Resiliency. Kyndryl values diversity and inclusion, creating a workplace where all individuals can bring their whole selves to work and support each other in achieving success. Through state-of-the-art resources, Fortune 100 clients, employee learning programs, and a culture of giving back, Kyndryl invests in your well-being, growth, and success. (Note: The "Preferred Skills and Experience" section is omitted as it was not included in the provided job description.) Role Overview: At Kyndryl, you will join the Security & Resiliency practice, a critical team dedicated to ensuring enterprises remain secure, available, reliable, and resilient. As a Cybersecurity Infrastructure Professional, you will play a crucial role in maintaining and enhancing the infrastructure that supports cybersecurity operations for Fortune 500 clients. Your responsibilities will include orchestrating infrastructure to protect systems from physical and cyber adversaries, preserving the integrity of IT infrastructure, securing networks, and safeguarding data from unauthorized access and malicious activities. If you have a passion for cybersecurity and enjoy the challenge of protecting critical assets, this role offers you the opportunity to be a cybersecurity hero at Kyndryl. Key Responsibilities: - Collaborate with SOC engineers, architects, and incident responders to document content logic, assumptions, and tuning parameters. - Participate in governance and change management processes, hunting for advanced persistent threats and zero-day exploits. - Monitor threat actor activity, TTPs, and IOCs, leveraging threat feeds from various sources. - Gather and analyze raw data to extract actionable insights and disseminate intelligence to stakeholders. - Produce executive-level dashboards, advise on risk mitigation strategies, and support audits and regulatory reporting. - Work with SOAR and SIEM teams to automate threat detection and response workflows and refine detection logic with SOC analysts and SIEM Engineering Team. Qualifications Required: - 7+ years of experience in CTI SME and working with SOC engineers, architects, and incident responders. - Proficiency in documenting content logic, governance processes, and change management. - Experience in threat hunting, monitoring threat actor activity, and leveraging threat feeds. - Ability to gather, filter, and analyze data to produce actionable insights and executive-level dashbo