Sr Security Consultant - Data Security(XSIAM)

IBM; Mumbai; On-site; INR 2,200,000 - 3,500,000; Full time

Job summary

IBM in Mumbai is seeking an experienced security specialist with hands-on Palo Alto Cortex XSIAM implementation experience to strengthen our SIEM/SOAR capabilities.

You will create and test content, tune detections against the MITRE framework, and work with the SOC team to ensure rapid detection and response to incidents. Develop dashboards, use cases, and reports across XDR, SIEM, and SOAR.

Preferred certs include CISSP and Palo Alto certifications; 8-10 years in XDR/SIEM/SOAR are expected.

Qualifications

• 8-10 years of hands-on experience in XDR, SIEM and SOAR.
• Hands-on Palo Alto Cortex XSIAM implementation experience.
• Experience deploying detections and content aligned with the MITRE framework.
• Develop and maintain SIEM dashboards, alerts, and reports.
• Collaborate with SOC teams to optimize SIEM for incident detection and response.
• Stay updated on the latest attack techniques and threat landscape.

Responsibilities

• Creates, updates, tests, and deploys content.
• Updates are measured against the MITRE framework.
• Work with the security operations team to ensure the SIEM system is configured and optimized to detect and respond to security incidents.
• Develop and maintain SIEM dashboards, alerts, and reports. Create and maintain SIEM use cases to detect specific security threats.
• Collaborate closely with cross-functional teams to ensure the effectiveness of detection mechanisms. (SOC Analyst, Cyber Threat Intel, Cyber Threat Hunting, SOC Management)
• Integrate content with various platforms and ensure seamless delivery aligned with business objectives and industry best practices.
• Monitor and analyze (XDR/SIEM/SOAR) content performance metrics to drive continuous improvement, troubleshooting and documenting.
• Continuously monitor the threat landscape and stay updated with the latest attack techniques and tactics.

Skills

SOC operations

Threat hunting

Cyber Threat Intel

MITRE ATT&CK

Cross-functional collaboration

Security incident response

Tools

Palo Alto Cortex XSIAM

Palo Alto XSOAR

Palo Alto XDR

SIEM

SOAR

CISSP

Job description

Mandatory exp : Palo Alto Cortex XSIAM Implementation hands on experience.

Required Professional and Technical Expertise

Responsibilities:

• Creates, updates, tests, and deploys content.
• Updates are measured against the MITRE framework.
• Work with the security operations team to ensure that the SIEM system is configured and optimized to detect and respond to security incidents.
• Develop and maintain SIEM dashboards, alerts, and reports. Create and maintain SIEM use cases to detect specific security threats.
• Collaborate closely with cross-functional teams to ensure the effectiveness of detection mechanisms. (SOC Analyst, Cyber Threat Intel, Cyber Threat Hunting, SOC Management)
• Integrate content with various platforms and ensure seamless delivery aligned with business objectives and industry best practices.
• Monitor and analyze (XDR/SIEM/SOAR) content performance metrics to drive continuous improvement, troubleshooting and documenting.
• Continuously monitor the threat landscape and stay updated with the latest attack techniques and tactics.

Number of Yrs exp : 8-10 Years

Product & Industry Cert: CISSP/OEM certifications/ Security+ etc..

Domain exp: XDR, SIEM and SOAR Automation.

Preferred Professional and Technical Expertise

• Palo-alto XIAM Certification is highly desirable.
• Palo-alto XSOAR experience & exposure is desired
• Palo-alto XDR, XSOAR Experience is good to have.