Security Consultant - TDR - SOAR Engineer

IBM; Bogotá; Presencial; COP 60.000.000 - 100.000.000; Jornada completa

Descripción de la vacante

IBM Consulting is seeking a Security Consultant specializing in Intelligence & Operations to help Client IT address security issues, exposures, and vulnerabilities with an emphasis on security intelligence and operations.

You will operate SecOps platforms, design automation playbooks, develop Python actions, and integrate tools via REST APIs to boost detection and incident response maturity.

Formación

• Hands-on experience with security operations platforms.
• Experience with security automation concepts (playbooks, rules, workflows).
• Experience developing custom integrations or automations using Python.
• REST API integrations between security platforms.
• Strong understanding of SIEM, XDR/EDR in SecOps.
• 2+ years in SecOps, SOC engineering, or security automation roles.
• Intermediate English level (technical communication).

Responsabilidades

• Operate and administer Google SecOps (Chronicle Security) and/or Palo Alto XSIAM platforms.
• Design, configure, and maintain automation workflows, including playbooks, actions, automations, and rules.
• Develop and maintain custom automation actions using Python.
• Integrate security tools and data sources using REST APIs.
• Analyze indicators of compromise (IOCs), investigate alerts, and support security incident investigations.
• Collaborate with SOC and engineering teams to improve detection, response, and automation maturity across the SecOps ecosystem.

Descripción del empleo

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Your Role And Responsibilities

As a Security Consultant specializing in Intelligence & Operations, you play a crucial role in helping Client IT understand and address key security issues, exposures, and vulnerabilities. Your expertise in security intelligence and operations enables you to articulate effective security strategies and mitigation measures.

Your Primary Responsibilities Will Include

• Operate and administer Google SecOps (formerly Chronicle Security) and/or Palo Alto XSIAM platforms.
• Design, configure, and maintain automation workflows, including playbooks, actions, automations, and rules.
• Develop and maintain custom automation actions using Python.
• Integrate security tools and data sources using REST APIs.
• Analyze indicators of compromise (IOCs), investigate alerts, and support security incident investigations.
• Collaborate with SOC and engineering teams to improve detection, response, and automation maturity across the SecOps ecosystem.

Required Technical And Professional Expertise

• Hands-on experience operating Google SecOps (Chronicle) and/or Palo Alto
• XSIAM.
• Solid understanding of security automation concepts (playbooks, rules,
• workflows).
• Experience developing custom integrations or automations using Python.
• Practical knowledge of REST API integrations between security platforms.
• Strong understanding of SIEM, XDR/EDR, and how security controls operate within a SecOps ecosystem.
• Experience with alert analysis, IOC handling, and incident investigation.
• 2+ years of experience in similar SecOps, SOC Engineering, or Security Automation roles.
• Intermediate English level (technical communication).

Preferred Technical And Professional Experience

• Previous experience automating processes using traditional SOAR platforms, such as IBM SOAR, Splunk SOAR, Cortex XSOAR, or similar.
• Knowledge of Bash, PowerShell, or CI/CD tools to support advanced automation use cases.
• Understanding of security frameworks such as MITRE ATT&CK and NIST.
• Experience designing security use cases or automation use cases.
• Certifications related to Google Cloud Security or Palo Alto Networks are a strong plus.