Threat Detection SOAR Engineer — Automation & Cloud Security

IBM; Bogotá; Presencial; COP 100.440.000 - 167.400.000; Jornada completa

Descripción de la vacante

IBM Consulting is seeking a Technical Consultant in Threat Detection Content & Administration to manage security technology infrastructure such as SIEM, SOAR, EDR, AV, and cloud security controls. You will develop use cases, rules, and policy recommendations to ensure efficient infrastructure functionality.

You will operate Google SecOps (Chronicle) and/or Palo Alto XSIAM, design automation workflows, and develop integrations using Python.

Formación

• Hands-on experience with Google SecOps (Chronicle) and/or Palo Alto XSIAM.
• Solid understanding of security automation concepts (playbooks, workflows, rules).
• Experience developing integrations or automations using Python.
• Practical knowledge of REST API integrations between security platforms.
• Strong understanding of SIEM/XDR/EDR and how security controls operate in SecOps.
• Experience with IOC handling and incident investigations.
• 2+ years in similar SecOps, SOC Engineering or Security Automation roles.
• Intermediate English level for technical communication.

Responsabilidades

• Operate and administer Google SecOps (Chronicle) and/or Palo Alto XSIAM platforms.
• Design, configure, and maintain automation workflows including playbooks, actions, and rules.
• Develop and maintain custom automation actions using Python.
• Integrate security tools and data sources using REST APIs.
• Analyze indicators of compromise (IOCs) and investigate security incidents.
• Collaborate with SOC and engineering teams to improve detection, response, and automation maturity across the SecOps ecosystem.

Conocimientos

Python programming

Security automation concepts

REST API integrations

SIEM/XDR/EDR understanding

IOC handling and incident analysis

English communication (intermediate)

2+ years in SecOps/SOC Engineering/Sec

Herramientas

Google SecOps (Chronicle)

Palo Alto XSIAM

Descripción del empleo

IBM Consulting is seeking a Technical Consultant in Threat Detection Content & Administration to manage security technology infrastructure such as SIEM, SOAR, EDR, AV, and cloud security controls. You will develop use cases, rules, and policy recommendations to ensure efficient infrastructure functionality.

You will operate Google SecOps (Chronicle) and/or Palo Alto XSIAM, design automation workflows, and develop integrations using Python.