SIEM/XDR Threat Detection Engineer (Hybrid)

IBM; Bogotá; Híbrido; COP 108.000.000 - 156.000.000; Jornada completa

Descripción de la vacante

IBM Consulting hires a Technical Consultant in Threat Detection Content & Administration to manage and maintain security technology infrastructure, including SIEM, SOAR, EDR, AV, and Cloud security controls. You will develop use cases, rules, and security policy recommendations to ensure efficient infrastructure functionality and client security postures.

You will design, implement, and tune correlation rules, manage log sources, dashboards, and reports, and work with clients to translate

Formación

• Hands-on experience operating SIEM/XDR platforms.
• Strong knowledge of SIEM/XDR configuration, including integrations, dashboards, reports, correlation rules, and access management.
• Experience troubleshooting SIEM/XDR operational and technical issues.
• Solid understanding of MITRE ATT&CK framework.
• Experience analyzing malicious or suspicious behaviors across enterprise environments.
• Strong written and verbal communication skills, with the ability to interact directly with clients.
• Ability to translate security findings into actionable recommendations.
• Intermediate English level (technical communication).

Responsabilidades

• Administer and operate SIEM/XDR platforms, including Google SecOps.
• Configure and manage log source integrations, dashboards, reports, correlation rules, policies, users, and roles within the SIEM/XDR platform.
• Troubleshoot and resolve SIEM/XDR platform-related issues, ensuring stability and optimal performance.
• Design and implement new correlation rules aligned with the client’s security risks and threat landscape.
• Analyze malicious behaviors and support threat detection and investigation activities.
• Provide security recommendations to improve detection capabilities, security posture, and overall SIEM/XDR platform performance.
• Communicate effectively with clients, both verbally and in writing, providing clear technical guidance and recommendations.

Conocimientos

SIEM/XDR expertise

Client communication

MITRE ATT&CK

Threat detection

Educación

Bachelor's Degree

Herramientas

Google SecOps

Windows

Linux

Descripción del empleo

IBM Consulting hires a Technical Consultant in Threat Detection Content & Administration to manage and maintain security technology infrastructure, including SIEM, SOAR, EDR, AV, and Cloud security controls. You will develop use cases, rules, and security policy recommendations to ensure efficient infrastructure functionality and client security postures.

You will design, implement, and tune correlation rules, manage log sources, dashboards, and reports, and work with clients to translate