SIEM/XDR Security Engineer - Threat Detection & Advisory

International Business Machines Corporation; Bogotá; On-site; COP 60,000,000 - 90,000,000; Full time

Job summary

IBM Consulting in Bogotá, Colombia seeks a Technical or Security Consultant specializing in Intelligence & Operations to help clients understand and mitigate security exposures and vulnerabilities. The role focuses on SIEM/XDR platforms and security operations, including design of detection rules and incident response support.

You will work with client IT teams, translate security findings into actionable guidance, and contribute to risk reduction across enterprise environments.

Qualifications

• Hands-on experience operating SIEM/XDR platforms.
• Strong knowledge of SIEM/XDR configuration, including integrations, dashboards, reports, and access management.
• Experience troubleshooting SIEM/XDR operational and technical issues.
• Solid understanding of MITRE ATT&CK framework.
• Excellent written and verbal communication with clients.

Responsibilities

• Administer and operate SIEM/XDR platforms, including Google SecOps.
• Configure and manage log source integrations, dashboards, reports, correlation rules, policies, users, and roles within the SIEM/XDR platform.
• Troubleshoot and resolve SIEM/XDR platform issues, ensuring stability and performance.
• Design and implement new correlation rules aligned with client security risks.
• Analyze malicious behaviors and support threat detection and investigations.
• Provide security recommendations to improve detection and security posture.

Skills

SIEM/XDR

MITRE ATT&CK

Threat detection

Client communication

Education

Bachelor's Degree

Tools

Google SecOps

SIEM/XDR platforms

Windows

Linux

Job description

IBM Consulting in Bogotá, Colombia seeks a Technical or Security Consultant specializing in Intelligence & Operations to help clients understand and mitigate security exposures and vulnerabilities. The role focuses on SIEM/XDR platforms and security operations, including design of detection rules and incident response support.

You will work with client IT teams, translate security findings into actionable guidance, and contribute to risk reduction across enterprise environments.