SS - CTM - TDR SIEM Engineer

International Business Machines Corporation; Bogotá; On-site; COP 90,000,000 - 150,000,000; Full time

Job summary

IBM Consulting in Bogotá seeks a Technical/Security Consultant specializing in Intelligence & Operations to help clients strengthen security postures and threat detection capabilities. You will work with SIEM/XDR platforms and support security operations across enterprises.

You will design rules, tune dashboards, and translate complex findings into actionable guidance for clients, leveraging MITRE ATT&CK and Google SecOps where applicable, with intermediate English for technical communication.

Qualifications

• Hands-on experience operating SIEM/XDR platforms.
• Strong knowledge of configuring SIEM/XDR: integrations, dashboards, reports, rules, access management.
• Experience troubleshooting SIEM/XDR operational issues.
• Solid understanding of MITRE ATT&CK framework.
• Ability to translate security findings into actionable recommendations.

Responsibilities

• Administer and operate SIEM/XDR platforms, including Google SecOps.
• Configure and manage log source integrations, dashboards, reports, correlation rules, policies, users, and roles.
• Troubleshoot and resolve SIEM/XDR platform issues to ensure stability.
• Design and implement new correlation rules aligned with client security risks.
• Analyze malicious behaviors and support threat detection and investigations.
• Provide security recommendations to improve detection capabilities and platform performance.
• Communicate effectively with clients, verbally and in writing, with clear technical guidance.

Skills

SIEM/XDR platforms

Log source integrations

Dashboards & reports

MITRE ATT&CK

Security communication

English communication

Tools

Google SecOps

Windows

Linux

Job description

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You'll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you'll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You'll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Your role and responsibilities

As a Technical or Security Consultant specializing in Intelligence & Operations, you play a crucial role in helping Client IT understand and address key security issues, exposures, and vulnerabilities. Your

expertise in security intelligence and operations enables you to articulate effective security strategies and mitigation measures.

Your primary responsibilities will include:

• Administer and operate SIEM/XDR platforms, including Google SecOps.
• Configure and manage log source integrations, dashboards, reports, correlation rules, policies, users, and roles within the SIEM/XDR platform.
• Troubleshoot and resolve SIEM/XDR platform-related issues, ensuring stability and optimal performance.
• Design and implement new correlation rules aligned with the client’s security risks and threat landscape.
• Analyze malicious behaviors and support threat detection and investigation activities.
• Provide security recommendations to improve detection capabilities, security posture, and overall SIEM/XDR platform performance.
• Communicate effectively with clients, both verbally and in writing, providing clear technical guidance and recommendations.

Required technical and professional expertise

Requirements:

• Required Professional and Technical Expertise
• Hands-on experience operating SIEM/XDR platforms.
• Strong knowledge of SIEM/XDR configuration, including integrations,
• dashboards, reports, correlation rules, and access management.
• Experience troubleshooting SIEM/XDR operational and technical issues.
• Solid understanding of MITRE ATT&CK framework.
• Experience analyzing malicious or suspicious behaviors across enterprise environments.
• Strong written and verbal communication skills, with the ability to interact
• directly with clients.
• Ability to translate security findings into actionable recommendations.
• Intermediate English level (technical communication).

Preferred technical and professional experience

Preferred:

• Hands-on experience operating Google SecOps
• Knowledge of Windows and Linux operating systems.

IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.