SOC Security Analyst (Microsoft Server Support, Tanium Security, SIEM)

Who We Are

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

We are seeking a highly skilled SOC Security Analyst with deep expertise in Microsoft server support, Tanium security, and SIEM (Security Information and Event Management) technologies. The ideal candidate will be responsible for enhancing our organization's cyber defense capabilities by managing and securing server environments, leveraging endpoint security solutions, and analyzing security events to mitigate risks effectively.

Key Responsibilities:

Microsoft Server Support:

• Provide expert-level support for Microsoft Windows Server environments, including installation, configuration, and maintenance of server OS and applications.

• Perform regular security hardening and patch management activities to ensure server infrastructure integrity and resilience.

• Collaborate with IT teams to troubleshoot server-related issues and implement security best practices to safeguard against vulnerabilities and exploits.

Tanium Security Operations:

• Utilize Tanium endpoint security solutions to monitor, manage, and secure endpoints across the organization’s network.

• Configure and deploy Tanium agents to ensure comprehensive visibility and control over endpoint security.

• Develop custom Tanium queries and scripts to identify threats, vulnerabilities, and compliance gaps in real-time.

SIEM Management and Analysis:

• Manage and maintain SIEM platforms (e.g., Splunk, logscale, falcon NGSEIM) to collect, correlate, and analyze security event data from various sources.

• Develop and tune SIEM rules, alerts, and correlation logic to enhance detection accuracy and minimize false positives.

• Analyze SIEM alerts and logs to detect potential security incidents, anomalies, and indicators of compromise (IOCs).

Incident Response and Investigation:

• Lead incident response efforts related to Microsoft server breaches, Tanium endpoint security incidents, and SIEM alerts.

• Conduct detailed forensic analysis and investigation of security incidents, determining their scope, impact, and root cause.

• Collaborate with cross-functional teams to contain, eradicate, and recover from breaches, following established incident response procedures.

Documentation and Reporting:

• Maintain up-to-date documentation on configurations, procedures, and incident response activities related to Microsoft servers, Tanium security, and SIEM operations.

• Generate comprehensive reports on security incidents, investigations, and remediation efforts for internal stakeholders and compliance requirements.

Your Future at Kyndryl

Every position at Kyndryl offers a way forward to grow your career, from Junior Administrator to Architect.  We have training and upskilling programs that you find anywhere else, including hands-on experience, learning opportunities, and the change to certify in all four major platforms.  One of the benefits of Kyndryl is that we work with customers in a variety of industries, from banking to retain. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here.

Kyndryl currently does not require employees to be fully vaccinated against COVID-19, however, if you are hired to work at a client, customer, or partner location, you may be required to show proof of vaccination to align with their respective COVID-19 vaccination policies.  Those who believe they are eligible may apply for a medical or religious accommodation prior to the start of employment.

Who You Are

• Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent experience).

• 3+ years of experience in Microsoft server administration (including Active Directory, Group Policy, and Windows Server roles/features).

• Proficiency in deployin