About the position

At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people—Kyndryls—that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive. As a Cybersecurity Defense Associate, you will help protect Kyndryl and its customers by supporting security operations, incident response, vulnerability management, threat hunting, and security intelligence activities. You will monitor, investigate, and respond to potential security threats across networks, endpoints, cloud environments, and critical infrastructure while working closely with cybersecurity specialists to strengthen organizational resilience. This role combines technical analysis, operational execution, and continuous learning to identify risks, support incident response efforts, and help defend against evolving cyber threats.

Responsibilities

• Monitor and analyze security events across networks, endpoints, cloud environments, and enterprise systems.
• Investigate and respond to cybersecurity incidents using established incident management processes.
• Support threat hunting activities to identify advanced threats, indicators of compromise (IOCs), and suspicious activity.
• Utilize Endpoint Detection and Response (EDR) and Network Detection and Response (NDR) tools to detect, investigate, and contain threats.
• Identify, assess, and support the remediation of vulnerabilities across systems and infrastructure.
• Analyze threat intelligence and security data to identify risks and emerging attack patterns.
• Support digital forensics and security investigations to determine root cause and impact.
• Assist with the deployment, configuration, and operation of cybersecurity tools and technologies.
• Document incidents, findings, remediation activities, and security recommendations.
• Collaborate with security operations, infrastructure, cloud, and application teams to improve security posture and resilience.

Requirements

• Foundational experience in cybersecurity, security operations, incident response, or a related security role.
• Knowledge of network, endpoint, cloud, and infrastructure security principles.
• Understanding of security monitoring, threat detection, and security event analysis.
• Foundational incident response and incident management skills.
• Understanding of vulnerability management and remediation processes.
• Familiarity with threat hunting concepts, methodologies, and common attacker techniques.
• Experience or working knowledge of EDR, NDR, SIEM, or related security technologies.
• Understanding of cyber threat intelligence, security investigations, and digital forensics fundamentals.
• Ability to troubleshoot security vulnerabilities, system security issues, and operational security events.
• Strong analytical, problem-solving, and documentation skills.
• Ability to communicate security findings to both technical and non-technical stakeholders.
• Strong collaboration skills and the ability to work effectively across cross-functional teams.

Nice-to-haves

• Experience in a managed security services, SOC, or cybersecurity operations environment.
• Experience with cloud security, Zero Trust architectures, cyber resiliency, DevSecOps, IoT security, or AI-related security technologies.
• Experience conducting threat hunting and advanced security investigations.
• Knowledge of current cyber threat landscapes, attacker tactics, techniques, and procedures (TTPs).
• Experience with User and Entity Behavior Analytics (UEBA) or advanced security analytics.
• Experience supporting enterprise incident response and recovery activities.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Industry certifications such as ECTHP (Certified Threat Hunting Professional), ECMAP (Malware Analysis Professional), Security+, CySA+, or other cybersecurity certifications.

Benefits

• medical and dental coverage
• disability
• retirement benefits
• paid leave
• paid time off
• Kyndryl’s discretionary annual bonus program