Incident Response & Threat Detection Consultant

International Business Machines Corporation; Bogotá; On-site; COP 90,000,000 - 150,000,000; Full time

Job summary

IBM Consulting in Bogotá is seeking a Technical Consultant specialized in Threat Detection, Incident Response & Intelligence. You will lead and execute end-to-end security incident response activities across detection, containment, eradication, and recovery, collaborating with SOC and IT teams.

You’ll investigate ransomware, intrusions, APTs, insider threats using EDR/XDR platforms and forensics tools, map adversary TTPs, perform RCA, and produce post-incident reports.

Qualifications

• 3+ years of experience in incident response, DFIR, or CSIRT roles handling advanced threats.
• Hands-on experience investigating ransomware, APTs, intrusions, and insider threat incidents.
• Strong skills with EDR/XDR platforms and log analysis using SIEM.
• Proficiency in Windows and Linux environments and cloud basics (Azure/AWS).

Responsibilities

• Lead end-to-end security incident response activities from detection to containment, eradication, and recovery.
• Participate directly in security incidents including ransomware, intrusions, APT activity, and insider threats.
• Perform advanced investigations using EDR/XDR telemetry, SIEM data, and forensic artifacts.
• Conduct digital forensics on endpoints and servers (memory, disk, system artifacts).
• Perform root cause analysis to determine scope and impact of incidents.
• Investigate adversary behavior using MITRE ATT&CK mappings.
• Correlate logs and events using SIEM to support investigations.
• Coordinate response efforts with SOC, IT, Legal, and business teams.
• Develop and maintain CSIRT playbooks and response procedures.
• Produce forensic documentation and post-incident reports with timelines and remediation recommendations.

Skills

Incident response

DFIR

CSIRT

English (Intermediate)

Tools

Microsoft Defender

CrowdStrike

SentinelOne

Cortex XDR

Velociraptor

FTK

EnCase

Autopsy

Volatility

Job description

IBM Consulting in Bogotá is seeking a Technical Consultant specialized in Threat Detection, Incident Response & Intelligence. You will lead and execute end-to-end security incident response activities across detection, containment, eradication, and recovery, collaborating with SOC and IT teams.

You’ll investigate ransomware, intrusions, APTs, insider threats using EDR/XDR platforms and forensics tools, map adversary TTPs, perform RCA, and produce post-incident reports.