Threat Management Security Consultant – SIEM & Detection

IBM; City of Westminster; Hybrid; GBP 90,000 - 140,000; Full time

Benefits offered by this job

Sabbatical programs

25 days holiday

Private medical

Dental & optical cover

Employee Assistance Program

Group pension plan (salary sacrifice)

Job summary

IBM Consulting UK FutureNow is seeking a Senior Security Consultant - Threat Management to design and modernise security operations across cloud, hybrid, and on‑prem environments. You will develop detection content, enhance SIEM/SOAR capabilities, and drive measurable outcomes through threat-informed defence.

You will lead threat hunting, support incident response, and deliver SOC uplift programmes, working with client security teams, architects, and stakeholders to produce client-ready

Qualifications

• Experience designing and implementing SIEM/SOAR solutions.
• Experience developing detection logic, analytics rules, use cases, and threat hunting content.
• Strong knowledge of MITRE ATT&CK and threat-informed defence principles.
• Experience supporting or leading incident investigation and response activities.
• Cloud security monitoring across Azure, AWS, or GCP environments.
• Proficiency in KQL, SPL, Python, PowerShell, or equivalent scripting languages.

Responsibilities

• Designing, implementing, and improving SIEM and security monitoring capabilities.
• Developing and tuning detection content, analytics rules, and correlation logic.
• Conducting threat hunting exercises aligned to MITRE ATT&CK and client threat profiles.
• Supporting incident response, investigation, and post-incident improvement activities.
• Delivering SOC maturity assessments, capability reviews, and uplift roadmaps.
• Integrating and optimising telemetry across cloud, identity, endpoint, network, and application environments.
• Designing and improving SOAR playbooks and automated response workflows.
• Advising clients on detection engineering standards, operational processes, and security monitoring strategy.
• Producing high-quality technical documentation, runbooks, operating procedures, and client deliverables.
• Leading workshops and presenting findings to both technical and non-technical stakeholders.
• Demonstrable experience within Threat Management, Detection Engineering, Security Operations, Incident Response, or Threat Hunting environments.

Skills

Threat management

SIEM/SOAR

MITRE ATT&CK

Threat hunting

Incident response

Cloud security monitoring

Query scripting languages

Consulting & stakeholder engagement

Technical writing

Documentation

Education

Certifications: SC-200, AZ-500, GCIH, GCIA, GCDA, Splunk ES

Tools

Microsoft Sentinel

Splunk

QRadar

Elastic

Chronicle

LogRhythm

Job description

IBM Consulting UK FutureNow is seeking a Senior Security Consultant - Threat Management to design and modernise security operations across cloud, hybrid, and on‑prem environments. You will develop detection content, enhance SIEM/SOAR capabilities, and drive measurable outcomes through threat-informed defence.

You will lead threat hunting, support incident response, and deliver SOC uplift programmes, working with client security teams, architects, and stakeholders to produce client-ready