MSS Security Academy Tracks
Learn More
Threat Monitoring
The Threat Monitoring Analyst oversees
and analyzes events, flows, trends and
alerts, and advises the customer of
potential security incidents.
Using tools as QRadar or Splunk the ana-
lyst must correlate and filter the informa-
tion received from multiple sensors and
event processors, finding threats and
tuning opportunities to have a healthy
environment on customer’s consoles.
Should be able to make recommenda-
tions to the customers looking for
decrease the security surface and enforce
the client’s security posture.
Identity Access Management
(IAM)
The Identity Access Management Agent
(IAM) is responsible for user lifecycle
management for in-scope systems using
multi-tier request processing and fulfill-
ment model.
In addition, the agent manages of
in-scope RACF profiles and policies,
administration and ongoing enhance-
ment of in-scope authentication ser-
vices, including Active Directory, Centri-
fy, CyberArk and Radiant Logic VDS.
Agents are also responsible for adminis-
tration of access roles and policies,
execution of re-certification campaigns,
and management of Privileged Access
Management accounts.
Firewall Analyst
(Network Protection)
The Firewall Analyst oversees analyze
events and logs from multiple vendor’s
firewall devices, must detect and report
any suspicious activity going through the
Firewall, review the ACLs and the cus-
tomer’s network in a basic level.
As part of the Firewall Analyst role is the
configuration and administration of
firewall and Unified Threat Management
(UTM) systems, providing IBM clients
with security recommendations and
assisting with planning and implementa-
tion of long-term projects.