SecOps Automation Engineer - SOAR & SIEM Specialist

IBM; Bogotá ciudad; Híbrido; COP 100.440.000 - 167.400.000; Jornada completa

Descripción de la vacante

IBM Consulting is seeking a Technical Consultant in Threat Detection Content & Administration based in Bogota, Colombia. You will manage security tech infrastructure, including SIEM, SOAR, EDR, AV, and cloud security controls, and deploy use cases, rules, and policy recommendations.

Collaborate with SOC and engineering teams to improve detection and automation maturity across the SecOps ecosystem, design automation workflows, and integrate REST APIs while applying MITRE ATT&CK and NIST

Formación

• Bachelor's Degree required.
• 2+ years in SecOps, SOC Engineering, or Security Automation roles.
• Hands-on experience with Google SecOps (Chronicle) and/or Palo Alto XSIAM.
• Knowledge of REST API integrations between security platforms.
• Understanding SIEM, XDR/EDR, and security controls in SecOps.
• Intermediate English communication.

Responsabilidades

• Operate and administer Google SecOps (Chronicle) and/or Palo Alto XSIAM.
• Design, configure, and maintain automation workflows and playbooks.
• Develop custom automation actions using Python.
• Integrate security tools using REST APIs.
• Analyze IOCs, investigate alerts, and support incident investigations.
• Collaborate with SOC and engineering teams to improve detection and automation maturity.

Conocimientos

Google SecOps

Palo Alto XSIAM

Security automation

REST APIs

IOC handling

Incident investigation

SOC Engineering

Automation workflows

Educación

Bachelor's Degree

Herramientas

Google Chronicle SecOps

Palo Alto XSIAM

Descripción del empleo

IBM Consulting is seeking a Technical Consultant in Threat Detection Content & Administration based in Bogota, Colombia. You will manage security tech infrastructure, including SIEM, SOAR, EDR, AV, and cloud security controls, and deploy use cases, rules, and policy recommendations.

Collaborate with SOC and engineering teams to improve detection and automation maturity across the SecOps ecosystem, design automation workflows, and integrate REST APIs while applying MITRE ATT&CK and NIST