Hybrid Security Ops Engineer — SOAR & TDR Expert

IBM; Bogotá ciudad; Híbrido; COP 108.000.000 - 180.000.000; Jornada completa

Descripción de la vacante

IBM Consulting is seeking a Security Consultant specialized in Intelligence & Operations to help clients address security exposures and runbooks, design automation, and integrate security tools across environments. The role emphasizes collaboration with SOC and engineering teams to improve detection, response, and automation maturity.

You will operate SecOps platforms, develop Python automation, and work in a hybrid delivery center setting with global teams and projects.

Formación

• Hands-on experience operating Google SecOps (Chronicle) and/or Palo Alto
• XSIAM knowledge
• Solid understanding of security automation concepts (playbooks, rules, workflows)
• REST API integrations between security platforms
• Experience with SIEM/XDR/EDR and SecOps tooling
• 2+ years in SecOps, SOC Engineering, or Security Automation roles
• Intermediate English level (technical communication)

Responsabilidades

• Operate and administer Google SecOps and/or Palo Alto XSIAM platforms.
• Design, configure, and maintain automation workflows, including playbooks and rules.
• Develop and maintain custom automation actions using Python.
• Integrate security tools and data sources via REST APIs.
• Analyze IOCs, investigate alerts, and support security incidents.
• Collaborate with SOC and engineering teams to improve SecOps maturity.

Conocimientos

Security operations

G Suite of security platforms

Python automation

REST API integrations

Threat analysis

Collaboration with SOC

English communication

Educación

Bachelor's Degree

Herramientas

Google SecOps Chronicle

Palo Alto XSIAM

Descripción del empleo

IBM Consulting is seeking a Security Consultant specialized in Intelligence & Operations to help clients address security exposures and runbooks, design automation, and integrate security tools across environments. The role emphasizes collaboration with SOC and engineering teams to improve detection, response, and automation maturity.

You will operate SecOps platforms, develop Python automation, and work in a hybrid delivery center setting with global teams and projects.