Technical Consultant-Threat Detection Content & Administration
IBM · Posted Nov 5
Hybrid cloud, artificial intelligence, enterprise software, quantum computing, and IT consulting services
Get a personal compatibility score
Add a resume for personal matches
About the role
IBM Consulting works with clients across industries on hybrid cloud and AI journeys, leveraging IBM technology, strategic partners, and Red Hat. The Threat Detection Content & Administration role manages and maintains security infrastructure including SIEM, SOAR, EDR, AV, and cloud security controls. The consultant develops and tunes use cases and rules, applies MITRE ATT&CK and NIST frameworks, and delivers security policy recommendations to clients.
What you will do
- Develop Use Cases and Rules: Create and tune use cases, rules, and optimization reports to identify malicious activity, and deploy them to the client environment. This involves analyzing system and network activity, indicators of compromise, and attacker tactics.
- Maintain Infrastructure: Ensure that security infrastructures are patched, upgraded, and functioning efficiently, utilizing expertise in Security Incident & Event Management (SIEM), Endpoint Detection and Response technology, and network security technologies.
- Apply Threat Frameworks: Utilize the MITRE ATT&CK framework to classify attacks, identify attack attribution, and assess risk, as well as the NIST Cybersecurity framework to evaluate the risk of threats.
- Deliver Security Policy Recommendations: Provide security policy recommendations to clients based on expertise in security technologies and threat analysis.
- Optimize Security Controls: Continuously monitor and optimize security controls to ensure efficient and effective threat detection and response.
Skills used in this role
What the employer is looking for
- Exposure to Security Technology Infrastructure: Experience with managing and maintaining security technology infrastructure, including SIEM, SOAR, EDR, AV, and Cloud security controls.
- Threat Analysis and Mitigation: Experience with analyzing system and network activity, indicators of compromise, and attacker tactics to identify malicious activity.
- Security Frameworks and Standards: Experience with applying the MITRE ATT&CK framework to classify attacks, identify attack attribution, and assess risk, as well as utilizing the NIST Cybersecurity framework to evaluate the risk of threats.
- Security Technologies Expertise: Experience with Security Incident & Event Management (SIEM), Endpoint Detection and Response technology, anti-malware, anti-spam, and network security technologies.
- Threat Detection and Response: Experience with developing and deploying use cases, rules, and security policy recommendations to ensure efficient infrastructure functionality and effective threat detection and response.
- Proficiency in Cloud Security: Experience with cloud security controls and technologies, including deployment and management of cloud-based security solutions.
- Knowledge of Anti-Malware Tools: Exposure to anti-malware and anti-spam technologies, including their integration with SIEM and EDR systems.
- Familiarity with Network Logging: Experience with general user and network activity logging policies, including log collection and analysis.
Benefits and support
- Compensation and benefits are detailed in the job posting
About IBM
International Business Machines Corporation (IBM) is a global technology and consulting company that provides hybrid cloud, artificial intelligence, and enterprise infrastructure solutions. Operating in over 175 countries, IBM helps businesses across industries modernize operations, secure data, and drive digital transformation through platforms like watsonx and Red Hat OpenShift. Founded over a century ago, the company remains a pioneer in high-performance computing, enterprise automation, and quantum technology.
- Industry
- Information Technology
- Company size
- 260,000+ employees
- Founded
- June 16, 1911
- Location
- Armonk, New York, USA
- Funding stage
- Public Company
Funding
Public Company · $3.5B raised
- ·Post Ipo Debt$150M
Leadership
Chairman, President and Chief Executive Officer
Senior Vice President and Chief Financial Officer
Senior Vice President, Software and Chief Commercial Officer
Senior Vice President, IBM Consulting
Senior Vice President, Marketing and Communications
Recent coverage
IBM Newsroom
Confluent Introduces Its Streamhouse Architecture to Power AI With Real-Time Business Context2026-11-04
IBM Newsroom
IBM named a Leader in the 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms2026-11-02
IBM Newsroom
At TechXchange 2026, IBM Announces New Capabilities to Put AI Agents to Work With Governance and Trust2026-10-27
IBM Newsroom
Cleveland Clinic, RIKEN and IBM Team Advance to Finals for 2026 ACM Gordon Bell Prize2026-09-09