{"id":3980419,"url":"https://alion.io/job/ibm-security-consultant-tdr-threat-intelligence-analyst","title":"Security Consultant - TDR - Threat Intelligence Analyst","company":{"id":86,"name":"IBM","domain":"ibm.com","url":"https://alion.io/company/ibm","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"IBM Careers","truth_index":{"grade":"A","score":99,"open_postings":74,"ghost_share":0.014,"stale_share":0.162,"repost_share":0.068,"time_to_fill_p50_days":15,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bogotá, Colombia"],"countries":["CO"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Autopsy","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Cortex XDR","optional":false},{"name":"Crowdstrike","optional":false},{"name":"EnCase","optional":false},{"name":"FTK","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"NIST CSF","optional":false},{"name":"Red Hat","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Velociraptor","optional":false},{"name":"Volatility","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-09T19:27:17Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-11T12:50:51Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You'll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you'll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You'll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences. Description and Responsibilities: As a Technical or Security Consultant specializing in Intelligence & Operations, you play a crucial role in helping Client IT understand and address key security issues, exposures, and vulnerabilities. Your expertise in security intelligence and operations enables you to articulate effective security strategies and mitigation measures. Your primary responsibilities will include:\nLead and execute end-to-end security incident response activities, from detection to containment, eradication, and recovery.\nParticipate directly in critical security incidents, including ransomware, intrusions, APT activity, and insider threats.\nPerform advanced incident investigations using EDR/XDR telemetry, SIEM data, and forensic artifacts.\nConduct digital forensics on endpoints and servers, including memory, disk, and system artifact analysis.\nPerform root cause analysis (RCA) and determine the scope and impact of security incidents.\nInvestigate adversary behavior using MITRE ATT&CK and map TTPs to incident activity.\nCorrelate logs and security events using SIEM platforms to support investigations.\nCoordinate technical response efforts with SOC, IT, Legal, and business teams during incident response and crisis situations.\nDevelop, maintain, and execute CSIRT playbooks and response procedures.\nProduce forensic documentation and post-incident reports, including timelines, impact assessments, and remediation recommendations. Requirements:\n3+ years of experience in incident response, DFIR, or CSIRT roles, handling advanced threats.\nProven hands-on experience investigating ransomware, APTs, intrusions, and insider threatincidents.\nStrong experience with EDR/XDR platforms, such as MicrosoftDefender, CrowdStrike, SentinelOne, and Cortex XDR.\nPractical knowledge of digital forensics and DFIR tools, including Velociraptor, FTK, EnCase, Autopsy, and Volatility.\nStrong skills in log analysis and event correlation using SIEM technologies.\nSolid understanding of Windows, Linux, and Active Directory environments.\nExperience performing MITRE ATT&CK-based investigations and adversary TTP analysis.\nFamiliarity with incident response frameworks, including NIST SP 800-61, NIST CSF, and ISO/IEC 27035.\nBasic experience working in cloud environments such as Azure and AWS.\nAbility to work under pressure during high-impact security incidents.\nIntermediate English level (technical reading and communication). Preferred:\nKnowledge of threat hunting methodologies and practices.\nExperience using scripts, APIs, or integrations with TIP, SIEM, and/or SOAR platforms for IOC ingestion and enrichment. Colombia Consulting Hybrid Professional Bogota, CO Bogota (0032) IBM de Colombia & CIA S.C.A Active Directory Amazon Web Services Communication Digital Forensics EnCase Software English Enrichment Forensic Toolkit Hunting Incident Response Inversion of Control Linux Log Analysis National Institute of Standards and Technology Pressure Security Security Information and Event Management Volatility Microsoft Windows Azure Endpoint Detection and Response Security Orchestration, Automation and Response National Institute of Standards and Technology Cybersecurity Framework IEC Standards International Organization for Standardization Cortex XDR Advanced Package Tool Certified Technology Manager","description_format":"text","description_chars":3990,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Intermediate (B1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security","LLM & Generative AI","Quantum Computing Hardware"],"lifecycle":[{"event":"open","at":"2026-11-09T19:27:17Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":15,"reasons":["conf:2","velocity","win:early","comp:brand"],"computed_at":"2026-11-11T05:49:22Z"},"pay":null,"html_url":"https://alion.io/job/ibm-security-consultant-tdr-threat-intelligence-analyst","json_url":"https://alion.io/job/ibm-security-consultant-tdr-threat-intelligence-analyst.json","meta":{"generated_at":"2026-11-11T13:40:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24986,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":86},"rest":"https://alion.io/mcp/rest/get_company?id=86"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fibm-security-consultant-tdr-threat-intelligence-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fibm-security-consultant-tdr-threat-intelligence-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fibm-security-consultant-tdr-threat-intelligence-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ibm-security-consultant-tdr-threat-intelligence-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fibm-security-consultant-tdr-threat-intelligence-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3980419}},{"tool":"search_jobs","arguments":{"company":"ibm.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3980419},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}