SIEM/XDR Security Engineer — Hybrid Cloud & Threat Detection

International Business Machines Corporation; Bogotá; On-site; COP 90,000,000 - 150,000,000; Full time

Job summary

IBM Consulting in Bogotá seeks a Technical/Security Consultant specializing in Intelligence & Operations to help clients strengthen security postures and threat detection capabilities. You will work with SIEM/XDR platforms and support security operations across enterprises.

You will design rules, tune dashboards, and translate complex findings into actionable guidance for clients, leveraging MITRE ATT&CK and Google SecOps where applicable, with intermediate English for technical communication.

Qualifications

• Hands-on experience operating SIEM/XDR platforms.
• Strong knowledge of configuring SIEM/XDR: integrations, dashboards, reports, rules, access management.
• Experience troubleshooting SIEM/XDR operational issues.
• Solid understanding of MITRE ATT&CK framework.
• Ability to translate security findings into actionable recommendations.

Responsibilities

• Administer and operate SIEM/XDR platforms, including Google SecOps.
• Configure and manage log source integrations, dashboards, reports, correlation rules, policies, users, and roles.
• Troubleshoot and resolve SIEM/XDR platform issues to ensure stability.
• Design and implement new correlation rules aligned with client security risks.
• Analyze malicious behaviors and support threat detection and investigations.
• Provide security recommendations to improve detection capabilities and platform performance.
• Communicate effectively with clients, verbally and in writing, with clear technical guidance.

Skills

SIEM/XDR platforms

Log source integrations

Dashboards & reports

MITRE ATT&CK

Security communication

English communication

Tools

Google SecOps

Windows

Linux

Job description

IBM Consulting in Bogotá seeks a Technical/Security Consultant specializing in Intelligence & Operations to help clients strengthen security postures and threat detection capabilities. You will work with SIEM/XDR platforms and support security operations across enterprises.

You will design rules, tune dashboards, and translate complex findings into actionable guidance for clients, leveraging MITRE ATT&CK and Google SecOps where applicable, with intermediate English for technical communication.