Security Automation Engineer: TDR & SOAR Specialist

IBM; Bogotá; Presencial; COP 60.000.000 - 100.000.000; Jornada completa

Descripción de la vacante

IBM Consulting is seeking a Security Consultant specializing in Intelligence & Operations to help Client IT address security issues, exposures, and vulnerabilities with an emphasis on security intelligence and operations.

You will operate SecOps platforms, design automation playbooks, develop Python actions, and integrate tools via REST APIs to boost detection and incident response maturity.

Formación

• Hands-on experience with security operations platforms.
• Experience with security automation concepts (playbooks, rules, workflows).
• Experience developing custom integrations or automations using Python.
• REST API integrations between security platforms.
• Strong understanding of SIEM, XDR/EDR in SecOps.
• 2+ years in SecOps, SOC engineering, or security automation roles.
• Intermediate English level (technical communication).

Responsabilidades

• Operate and administer Google SecOps (Chronicle Security) and/or Palo Alto XSIAM platforms.
• Design, configure, and maintain automation workflows, including playbooks, actions, automations, and rules.
• Develop and maintain custom automation actions using Python.
• Integrate security tools and data sources using REST APIs.
• Analyze indicators of compromise (IOCs), investigate alerts, and support security incident investigations.
• Collaborate with SOC and engineering teams to improve detection, response, and automation maturity across the SecOps ecosystem.

Descripción del empleo

IBM Consulting is seeking a Security Consultant specializing in Intelligence & Operations to help Client IT address security issues, exposures, and vulnerabilities with an emphasis on security intelligence and operations.

You will operate SecOps platforms, design automation playbooks, develop Python actions, and integrate tools via REST APIs to boost detection and incident response maturity.