Technical Consultant – Threat Detection & SOAR Engineer

About the role

IBM Consulting is seeking a Technical Consultant to join its Threat Detection Content & Administration team. You will manage security technology infrastructure and develop automation to enhance detection and response capabilities.

Key responsibilities

• Operate and administer Google SecOps (Chronicle) and/or Palo Alto XSIAM platforms.
• Design, configure and maintain automation workflows, playbooks, actions and rules.
• Develop custom automation actions using Python and integrate security tools via REST APIs.
• Analyze indicators of compromise, investigate alerts and support security incident investigations.
• Collaborate with SOC and engineering teams to improve detection, response and automation maturity.

Required profile

• 2+ years experience in SecOps, SOC engineering or security automation.
• Hands‑on experience with Google SecOps (Chronicle) and/or Palo Alto XSIAM.
• Solid understanding of security automation concepts, SIEM, XDR/EDR and security controls.
• Intermediate English for technical communication.

Required skills

• Google SecOps (Chronicle) or Palo Alto XSIAM
• Python programming
• REST API integration
• SIEM, XDR/EDR technologies
• Bash or PowerShell scripting
• CI/CD tooling for automation
• Knowledge of MITRE ATT&CK and NIST frameworks