Jobs

Senior Incident Response Consultant

IBM

Groningen, Netherlands

On-site

Full-time

1mo ago

Benefits & Perks

•Parental leave

•Competitive salary and equity package

•Generous paid time off and holidays

•Flexible work arrangements

•Parental Leave

•Equity

•Flexible Hours

Required Skills

PostgreSQL

Python

JavaScript

Jobs
View All Jobs
Companies
Advice
Coaching
Newsletter
Employers
Sign In
Saved Companies
Account Settings
Sign Out

IBM

Senior Incident Response Consultant

2 weeks ago• Groningen, Netherlands
Viewed on February 1, 2026
Apply on company site

About Us

IBM researches, develops, manufactures, and markets technology products ranging from mainframe computers to cognitive solutions, always with a core drive to innovate and explore new fields.

Size: 10000+ employees
Industry: Technology

View Company Profile:

Introduction

Information and data are among the most critical organisational assets in modern businesses. As a Senior Incident Response Consultant, you will act as a trusted advisor to IBM clients, analysing business requirements and delivering effective incident response and cyber security solutions. You will apply deep technical expertise to balance security and business enablement, supporting the continued growth of IBM's X-Force Incident Response practice, including the effective use of cloud-native and AI-enabled security capabilities.

Your role and responsibilities

As a Senior Incident Response Consultant within IBM X-Force Incident Response (X-Force IR), you will be responsible for the delivery and growth of X-Force IR services. You will lead teams responding to high-profile cyber security incidents across client enterprise environments and work closely with clients to prevent, detect, and respond to future incidents.

You will serve as a trusted advisor, helping clients to mature their incident response capabilities and broader cyber security programmes. The role requires close collaboration with internal IBM stakeholders to deliver integrated solutions to complex client challenges, including advisory support on modern, cloud-first security architectures.

You will demonstrate strong expertise across multiple aspects of incident response, including leading complex investigations, guiding less experienced consultants, and applying cyber security best practices across on-premises and cloud environments. You will be proficient with leading endpoint detection and response tools and forensic analysis platforms such as X-Ways. A strong understanding of Windows and Linux enterprise environments is required, including technologies such as Active Directory, Microsoft 365, firewalls, intrusion detection and prevention systems, security information and event management platforms, and cloud-native identity and logging services.

When not actively responding to incidents, you will conduct enterprise threat hunting, support the development and review of incident response plans, facilitate technical and executive-level tabletop and purple team exercises, and deliver additional strategic services aligned to incident response and cyber resilience, including guidance on the use of AI-driven detection and investigation capabilities.

Excellent written and verbal communication skills are essential.

The role includes participation in an on-call rota to support incident response engagements outside of standard business hours. On-call responsibilities are shared across the team and managed to support sustainable working practices.

Required education

Bachelor's Degree

Required technical and professional expertise

General Experience
Significant hands-on experience with tools used in incident response, digital forensics, network security assessments, and or application security

Want more jobs like this?

Get jobs in Groningen, Netherlands delivered to your inbox every week.
Email Address

Send me The Muse newsletters for the best in career advice and job search tips.

Get jobs!
By signing up, you agree to our • At least two years' experience assessing and developing enterprise-wide policies and procedures for IT risk mitigation and incident response

Proven experience leading incident response engagements across all phases of an investigation
Experience managing and mentoring consultants with comparable technical skill sets
Ability to work independently while providing leadership on internal initiatives and client engagements
Forensic Analysis and Incident Response
Ability to perform forensic analysis on Windows and Unix systems to identify evidence of compromise
Proficiency with industry-standard forensic tools, including X-Ways and En Case
Experience performing log analysis both locally and through SIEM or log aggregation platforms, including cloud-native and AI-assisted analytics, particularly Splunk or ELK
Experience conducting threat hunting activities in large enterprise and cloud environments
Hands-on experience deploying, configuring, and using endpoint detection and response tools
Strong understanding of common network protocols, associated security risks, and control mechanisms
Familiarity with enterprise Windows and Linux applications, including Active Directory, Exchange, and Microsoft 365, as well as associated logging sources
Knowledge of tools and techniques used to analyse and reverse network protocols, authentication flows, and data flows across enterprise and cloud environments
Experience working with major cloud platforms, including IBM Cloud, AWS, Google Cloud Platform, or Microsoft Azure
Ability to produce clear, structured reports for both technical and non-technical audiences
Strategic Assessment, Automation, and AI
Review and analyse client policies, processes, and procedures to identify gaps at strategic and tactical levels, and provide recommendations to mature incident response capabilities and overall cyber security posture
Strong familiarity with security frameworks and standards, including ISO 27001 and 27002, PCI DSS, NIST 800-53, NIST 800-171, and relevant data protection and • Demonstrated experience planning, scoping, and delivering technical and executive-level tabletop exercises focused on incident response
Ability to incorporate current threat trends and develop bespoke scenarios relevant to client environments
Low-level operating system knowledge, including automation and administrative task execution
Scripting or programming experience, preferably using languages commonly applied in DFIR such as Python or PowerShell, including the development or adaptation of automation to support investigations
Experience working with large-scale data sets using platforms such as Splunk or ELK, including advanced querying and analytics
Proficiency with shell utilities, including grep, sed, and awk, to efficiently process data
Practical experience with virtualisation and cloud platforms, including IBM Cloud, AWS, Google Cloud Platform, and Microsoft Azure
Experience applying AI-enabled analytics and tooling to support detection, investigation prioritisation, and incident response decision-making

Preferred technical and professional experience

Broad understanding of cyber security vulnerabilities, common attack techniques, and mitigation strategies
Experience developing both strategic incident response plans and tactical playbooks
Strong capability to coordinate workstreams, manage complex investigations, and provide technical leadership during active incident response engagements

ABOUT BUSINESS UNIT:

IBM Consulting is IBM's consulting and global professional services business, with market leading capabilities in business and technology transformation. With deep expertise in many industries, we offer strategy, experience, technology, and operations services to many of the most innovative and valuable companies in the world. Our people are focused on accelerating our clients' businesses through the power of collaboration. We believe in the power of technology responsibly used to help people, partners and the planet.

YOUR LIFE @ IBM

In a world where technology never stands still, we understand that, dedication to our clients success, innovation that matters, and trust and personal responsibility in all our relationships, lives in what we do as IBMers as we strive to be the catalyst that makes the world work better.

Being an IBMer means you'll be able to learn and develop yourself and your career, you'll be encouraged to be courageous and experiment everyday, all whilst having continuous trust and support in an environment where everyone can thrive whatever their personal or professional background.

Our IBMers are growth minded, always staying curious, open to feedback and learning new information and skills to constantly transform themselves and our company. They are trusted to provide on-going feedback to help other IBMers grow, as well as collaborate with colleagues keeping in mind a team focused approach to include different perspectives to drive exceptional outcomes for our customers. The courage our IBMers have to make critical decisions everyday is essential to IBM becoming the catalyst for progress, always embracing challenges with resources they have to hand, a can-do attitude and always striving for an outcome focused approach within everything that they do.

Are you ready to be an IBMer?

ABOUT IBM

IBM's greatest invention is the IBMer. We believe that through the application of intelligence, reason and science, we can improve business, society and the human condition, bringing the power of an open hybrid cloud and AI strategy to life for our clients and partners around the world.

Restlessly reinventing since 1911, we are not only one of the largest corporate organizations in the world, we're also one of the biggest technology and consulting employers, with many of the Fortune 500 companies relying on the IBM Cloud to run their business.

At IBM, we pride ourselves on being an early adopter of artificial intelligence, quantum computing and blockchain. Now it's time for you to join us on our journey to being a responsible technology innovator and a force for good in the world.

IBM is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, neurodivergence, age, or other characteristics protected by the applicable law. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.

OTHER RELEVANT JOB DETAILS:

IBM wants you to bring your whole self to work and for you this might mean the ability to work flexibly. If you are interested in a flexible working pattern, please talk to our recruitment team to find out if this is possible in the current working environment.

Client-provided location(s): Groningen, Netherlands Job ID: IBM-82654Employment Type: OTHERPosted: 2026-01-13T18:53:24Apply on company site

Perks and Benefits

Health and Wellness

Parental Benefits

Work Flexibility

Office Life and Perks

Vacation and Time Off

Financial and Retirement

Professional Development

Diversity and Inclusion

Company Videos

Hear directly from employees about what it is like to work at IBM.
0 seconds of 2 minutes, 18 seconds Volume 0%
Press shift question mark to access a list of keyboard shortcuts Keyboard Shortcuts Enabled Disabled Shortcuts Open/Close/ or ?Play/PauseSPACEIncrease Volume↑Decrease Volume↓Seek Forward→Seek Backward←Captions On/Offc Fullscreen/Exit Fullscreenf Mute/Unmutem Decrease Caption Size-Increase Caption Size+ or =Seek %0-9

Next Up Hear from a Senior Brand Designer at Koalafi
Carter's Employee Testimonial00:54

facebook
linkedin
x
tumblr
reddit
pinterest
Email
Linkhttps://cdn.jwplayer.com/previews/IEqzDgFZCopied

Live00:0002:1802:18