SIEM/XDR Security Consultant: Intelligence & Operations

IBM; Bogotá ciudad; Híbrido; COP 9.000.000 - 18.000.000; Jornada completa

Descripción de la vacante

IBM Consulting in Bogotá is seeking a Security Consultant specializing in intelligence and operations to help Client IT address security exposures and vulnerabilities, implementing SIEM/XDR best practices and advanced monitoring. You will craft correlation rules, analyze threats, and communicate findings clearly to clients, aligning with MITRE ATT&CK and Google SecOps integrations.

This hybrid role offers collaboration with global teams while delivering security improvements for enterprise

Formación

• Hands-on experience operating SIEM/XDR platforms.
• Strong knowledge of SIEM/XDR configuration, including integrations, dashboards, reports, correlation rules, and access management.
• Experience troubleshooting SIEM/XDR operational and technical issues.
• Solid understanding of MITRE ATT&CK framework.
• Ability to translate security findings into actionable recommendations.

Responsabilidades

• Administer and operate SIEM/XDR platforms, including Google SecOps.
• Configure and manage log source integrations, dashboards, reports, correlation rules, policies, users, and roles within the SIEM/XDR platform.
• Troubleshoot and resolve SIEM/XDR platform-related issues, ensuring stability and optimal performance.
• Design and implement new correlation rules aligned with the client’s security risks.

Conocimientos

SIEM/XDR configuration

Threat intelligence

MITRE ATT&CK

Client communication

English communication

Educación

Bachelor's Degree

Herramientas

Google SecOps

Windows OS

Linux OS

Descripción del empleo

IBM Consulting in Bogotá is seeking a Security Consultant specializing in intelligence and operations to help Client IT address security exposures and vulnerabilities, implementing SIEM/XDR best practices and advanced monitoring. You will craft correlation rules, analyze threats, and communicate findings clearly to clients, aligning with MITRE ATT&CK and Google SecOps integrations.

This hybrid role offers collaboration with global teams while delivering security improvements for enterprise