Find your next role

Discover amazing opportunities across our network of companies committed to gender equality in the workplace.

SOC XDR/SIEM Engineer

IBM

IBM

Bogotá, Bogota, Colombia
Posted on Feb 18, 2025
Introduction

At IBM, work is more than a job - it's a calling: To build. To design. To code. To consult. To think along with clients and sell. To make markets. To invent. To collaborate. Not just to do something better, but to attempt things you've never thought possible. Are you ready to lead in this new era of technology and solve some of the world's most challenging problems? If so, let’s talk.

Your role and responsibilities

Role and Responsibilities

As a SOC XDR/SIEM engineer you will work with IBM clients to support the operation of the SIEM/XDR technology and improve their security posture.

* Configure and tuning the SIEM/XDR tools.

* Create new log source integrations, reports, dashboards, correlation rules, policies, users, roles, etc.

* Troubleshoot any related platform issues.

* Escalate to SIEM/XDR vendors when needed.

* Meet with clients on recurring basis to present operational reports, backlog, metrics, etc.

* Provide recommendations to optimize the security posture, threat detection capabilities and the performance of the SIEM/XDR/EDR platform.

* Integrate threat intelligence and threat detection capabities.

Required education
High School Diploma/GED
Preferred education
Bachelor's Degree
Required technical and professional expertise
Required Professional and Technical Expertise

* 3 years of experience in cyber security.

* 2 years of experience with XDR/SIEM technologies.

* Expertise working with SIEM/XDR /EDR tools like Palo Alto XSIAM, IBM QRadar SIEM, MSFT Sentinel, Cortex XDR, MSFT Defender, etc.

* Understanding of Security technologies and best practices.

* Experience with Unix CLI (RHEL, Ubuntu, etc.).

* Experience with MITRE ATT&CK.

* Outstanding communication skills.

* English level: Intermediate English

Preferred technical and professional experience

* Bachelor’s degree in cyber security

* CompTIA Security+ or similar certification

* English level: Upper Intermediate English.