Threat Detection & Incident Response Consultant

IBM; Bogotá; Presencial; COP 40.500.000 - 49.500.000; Jornada completa

Descripción de la vacante

IBM Consulting is hiring a Technical Consultant: Threat Detection, Response & Intelligence to safeguard digital infrastructure by analyzing security events, correlating data, and prioritizing incidents. You will conduct in-depth root cause analyses, interpret IOCs, and apply threat intelligence to client investigations.

The role requires strong analytical skills, practical MITRE ATT&CK knowledge, and collaboration across teams to tune SIEM/XDR platforms.

Formación

• Perform advanced analysis of security events and logs across multiple data sources.
• Correlate events, conduct deep log reviews, analyze alerts, and validate true positives vs. false positives.
• Execute incident triage, classification, and prioritization based on risk and impact.
• Conduct advanced root cause analysis to identify how incidents originated and evolved.
• Analyze IOCs and threat vectors, supporting detection and investigation activities.
• Apply threat intelligence feeds to enhance analysis for specific clients and industries.
• Identify and interpret signals of exploitation, vulnerabilities, and security gaps.
• Collaborate with team members to tune and optimize SIEM/XDR platforms.
• Manage technical communication and incident escalation in accordance with defined procedures.

Responsabilidades

• Perform advanced analysis of security events and logs across multiple data sources.
• Correlate events, conduct deep log reviews, analyze alerts, and validate true positives vs. false positives.
• Execute incident triage, classification, and prioritization based on risk and impact.
• Conduct advanced root cause analysis (RCA) to identify how incidents originated and evolved.
• Analyze IOCs and threat vectors, supporting detection and investigation activities.
• Apply threat intelligence feeds to enhance analysis for specific clients and industries.
• Identify and interpret signals of exploitation, vulnerabilities, and security gaps.
• Collaborate with team members to tune and optimize SIEM/XDR platforms.
• Manage technical communication and incident escalation in accordance with defined procedures.

Conocimientos

Log analysis

Incident investigation

Incident triage

Root cause analysis

Threat intelligence

MITRE ATT&CK

SIEM/XDR tuning

Technical communication

English (tech)

Herramientas

SIEM

XDR

Descripción del empleo

IBM Consulting is hiring a Technical Consultant: Threat Detection, Response & Intelligence to safeguard digital infrastructure by analyzing security events, correlating data, and prioritizing incidents. You will conduct in-depth root cause analyses, interpret IOCs, and apply threat intelligence to client investigations.

The role requires strong analytical skills, practical MITRE ATT&CK knowledge, and collaboration across teams to tune SIEM/XDR platforms.