Back
IBM logo

Security Consultant-Infrastructure Security

IBM · Posted Oct 19

Hybrid cloud, artificial intelligence, enterprise software, quantum computing, and IT consulting services

Bangalore, INFull-timeHybridLead/Staff10–15 years₹32.0L–₹48.0L yearly<25 applicants
Information TechnologyCloud ComputingArtificial IntelligenceQuantum ComputingEnterprise SoftwareIT ConsultingPublic Company
Be an early applicantFull time

Get a personal compatibility score

Add a resume for personal matches

About the role

IBM Consulting works with leading companies across industries to shape their hybrid cloud and AI journeys, supported by IBM technology, strategic partners and Red Hat. The Security Service Delivery Manager role owns end-to-end delivery, governance and continuous improvement of cybersecurity managed services for enterprise and BFSI customers, covering SOC, SIEM, SOAR, XDR/EDR, incident response, threat intelligence, threat hunting and vulnerability management. The position acts as the primary operational interface between customers and security delivery teams, managing SLAs, KPIs, service transitions and compliance.

What you will do

  • Own end-to-end delivery of cybersecurity managed services for assigned customers.
  • Ensure all services are delivered within agreed SLA, KPI, OLA and contractual commitments.
  • Establish service governance, operating processes and escalation mechanisms.
  • Monitor service availability, service quality and operational performance.
  • Identify service gaps and drive corrective and preventive actions.
  • Ensure effective coordination between SOC, engineering, incident response and customer teams.
  • Manage service transition and onboarding of new customers.
  • Act as the primary operational point of contact for customers.
  • Build strong relationships with CISO, CIO, IT, SOC and security stakeholders.
  • Conduct regular customer governance meetings.
  • Present service performance, security trends, risks, incidents and improvement initiatives.
  • Manage customer escalations and ensure timely resolution.
  • Understand customer security requirements and translate them into operational service requirements.
  • Drive customer satisfaction and retention.
  • Establish and maintain a structured Service Management Framework.
  • Conduct: Daily operational reviews; Weekly service reviews; Monthly Service Review Meetings; Quarterly Business Reviews
  • Track SLA/KPI performance and service improvement actions.
  • Maintain RAID logs covering risks, assumptions, issues and dependencies.
  • Manage action items and ensure timely closure.
  • Ensure governance documentation is current and audit-ready.
  • Own service-level management of security incidents.
  • Ensure critical incidents are escalated according to defined procedures.
  • Coordinate customer communication during P1/P2 incidents.
  • Conduct and present Major Incident Reviews / PIRs.
  • Track root-cause analysis and corrective actions.
  • Drive Problem Management for recurring security and service issues.
  • Identify trends and prevent repeat incidents.
  • Own the service performance dashboard covering: SOC – Alert & incident volumes; Detection – MTTD; Response – MTTA / MTTR; Incident – SLA compliance; Quality – False Positive Rate; SIEM – Log-source availability; SIEM Engineering – Use cases delivered; SOAR – Automation rate; XDR – Endpoint coverage; Service Desk – Ticket SLA; Availability – Platform/service uptime; Customer – CSAT; Improvement – CSI initiatives
  • Identify SLA breaches and drive recovery plans.
  • Establish early-warning mechanisms for SLA risks.
  • Maintain monthly KPI trends and management reporting.
  • Work with delivery leadership to ensure appropriate staffing.
  • Monitor resource utilization and workload.
  • Forecast resource requirements based on: Customer growth, Incident volumes, Log volumes/EPS, Number of security technologies, Service scope
  • Support hiring, onboarding and resource ramp-up.
  • Ensure appropriate L1/L2/L3 and engineering coverage.
  • Lead security-service transition from sales/project teams into BAU operations.
  • Define transition plans, milestones and acceptance criteria.
  • Ensure documentation, architecture, access, SOPs and runbooks are completed.
  • Coordinate onboarding of SIEM/XDR/EDR/security data sources.
  • Conduct operational readiness reviews.
  • Ensure formal handover to BAU teams.
  • Identify opportunities to improve service quality, efficiency and customer experience.
  • Drive automation and operational optimization.
  • Reduce: False positives, MTTR, Manual activities, Recurring incidents, SLA breaches
  • Drive adoption of new security technologies and processes.
  • Maintain a formal Continuous Service Improvement (CSI) backlog.
  • Ensure services comply with applicable regulatory and contractual requirements.
  • Support requirements related to: RBI, CERT-In, ISO 27001, NIST, DPDP Act, Customer-specific security policies
  • Coordinate internal and external audits.
  • Track compliance gaps and remediation.
  • Maintain evidence required for audits and customer assessments.
  • Coordinate with security technology vendors and third-party service providers.
  • Manage vendor escalations.
  • Track product/platform support issues.
  • Coordinate vendor POCs, upgrades and technology changes.
  • Monitor vendor SLA and service performance.
  • Monthly Service Review Report
  • Quarterly Business Review
  • SOC Performance Dashboard
  • SLA/KPI Dashboard
  • Security Incident Report
  • Major Incident / PIR Report
  • Service Improvement Plan
  • Capacity & Resource Forecast
  • Risk & Issue Register
  • Customer Action Tracker
  • Service Transition Plan
  • Continual Service Improvement Roadmap

Skills used in this role

SIEMSOARSOCXDREDRIncident ResponseThreat IntelligenceThreat HuntingVulnerability ManagementCloud SecurityIBM QRadarMicrosoft SentinelSplunkGoogle ChronicleCortex XSOARQRadar SOARCortex XSIAMCrowdStrikeMicrosoft DefenderMITRE ATT&CKNISTISO 27001ITILSecurity AnalyticsCommunication

What the employer is looking for

  • 10–15+ years of experience in IT/Security Service Delivery.
  • 5+ years in cybersecurity managed services/MSSP/SOC environments.
  • Strong experience managing enterprise security customers.
  • Strong understanding of ITIL/service-management processes.
  • Experience managing SLAs, KPIs, OLAs and contractual commitments.
  • Experience managing multiple customers and geographically distributed teams.
  • SIEM – IBM QRadar, Microsoft Sentinel, Splunk, Google Chronicle
  • SOAR – Cortex XSOAR, QRadar SOAR
  • XDR/EDR – Cortex XSIAM, CrowdStrike, Microsoft Defender
  • Threat Intelligence / TIP
  • Incident Response
  • Threat Hunting
  • Vulnerability Management
  • Cloud Security
  • Security Analytics
  • MITRE ATT&CK
  • NIST
  • ISO 27001
  • Strong customer relationship management
  • Excellent communication and presentation skills
  • Executive stakeholder management
  • Strong negotiation and escalation-management skills
  • Commercial awareness
  • Analytical and problem-solving capability
  • Strong ownership and accountability
  • Crisis and major-incident management
  • Ability to manage multiple customers simultaneously
  • Strong team leadership and collaboration
  • Continuous-improvement mindset

Preferred qualifications

  • Experience in BFSI/financial-services environments is preferred.
  • ITIL 4 Foundation/Managing Professional
  • CISSP
  • CISM
  • ISO 27001 Lead Auditor/Implementer
  • PMP/Prince2
  • Vendor-specific security certifications

Benefits and support

  • Compensation and benefits are detailed in the job posting

About IBM

International Business Machines Corporation (IBM) is a global technology and consulting company that provides hybrid cloud, artificial intelligence, and enterprise infrastructure solutions. Operating in over 175 countries, IBM helps businesses across industries modernize operations, secure data, and drive digital transformation through platforms like watsonx and Red Hat OpenShift. Founded over a century ago, the company remains a pioneer in high-performance computing, enterprise automation, and quantum technology.

Industry
Information Technology
Company size
260,000+ employees
Founded
June 16, 1911
Location
Armonk, New York, USA
Funding stage
Public Company

Funding

Public Company · $3.5B raised

Institutional Public ShareholdersVanguard GroupBlackRock
  • ·Post Ipo Debt$150M

Leadership

AK
Arvind Krishna

Chairman, President and Chief Executive Officer

JJ
James J. Kavanaugh

Senior Vice President and Chief Financial Officer

RT
Rob Thomas

Senior Vice President, Software and Chief Commercial Officer

MA
Mohamad Ali

Senior Vice President, IBM Consulting

JH
Jonathan H. Adashek

Senior Vice President, Marketing and Communications

Apply