{"id":3677711,"url":"https://alion.io/job/ibm-technical-consultant-threat-detection-content-administration-3","title":"Technical Consultant-Threat Detection Content & Administration","company":{"id":86,"name":"IBM","domain":"ibm.com","url":"https://alion.io/company/ibm","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"IBM Careers","truth_index":{"grade":"A","score":100,"open_postings":69,"ghost_share":0,"stale_share":0.174,"repost_share":0.058,"time_to_fill_p50_days":15,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chennai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-11-03T11:47:10Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-06T08:55:39Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You'll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you'll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You'll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences. As a Technical Consultant in Threat Detection Content & Administration, you will manage and maintain security technology infrastructure, including SIEM, SOAR, EDR, AV, and Cloud security controls. You will develop and deploy use cases, rules, and security policy recommendations to ensure efficient infrastructure functionality. Your primary responsibilities will include:\nDevelop Use Cases and Rules: Create and tune use cases, rules, and optimization reports to identify malicious activity, and deploy them to the client environment. This involves analyzing system and network activity, indicators of compromise, and attacker tactics.\nMaintain Infrastructure: Ensure security technology infrastructure is patched, upgraded, and functioning efficiently, including SIEM, SOAR, EDR, AV, and Cloud security controls.\nApply Security Frameworks: Utilize the MITRE ATT&CK framework to classify attacks, identify attack attribution, and assess risk, and apply the NIST Cybersecurity framework to evaluate the risk of threats.\nDeliver Security Policy Recommendations: Provide security policy recommendations based on expertise in Security Incident & Event Management (SIEM), Endpoint Detection and Response technology, anti-malware, anti-spam, network security technologies, and general user and network activity logging policies.\nOptimize Security Controls: Continuously monitor and optimize security controls to ensure they are aligned with industry best practices and client needs.\nExposure to Security Technology Infrastructure: Experience with managing and maintaining security technology infrastructure, including SIEM, SOAR, EDR, AV, and Cloud security controls.\nThreat Analysis and Mitigation: Experience with analyzing system and network activity, indicators of compromise, and attacker tactics to identify malicious activity.\nSecurity Framework Application: Experience with applying the MITRE ATT&CK framework to classify attacks, identify attack attribution, and assess risk, as well as utilizing the NIST Cybersecurity framework to evaluate the risk of threats.\nSecurity Policy Development: Experience with developing security policy recommendations based on expertise in Security Incident & Event Management (SIEM), Endpoint Detection and Response technology, anti-malware, anti-spam, network security technologies, and general user and network activity logging policies.\nSecurity Control Optimization: Experience with continuously monitoring and optimizing security controls to ensure alignment with industry best practices and client needs.\nProficiency in Cloud Security: Exposure to cloud security controls, including deployment and management of cloud-based security solutions, is beneficial for this role.\nFamiliarity with Network Security: Experience working with network security technologies, including anti-malware and anti-spam solutions, is advantageous for this position.\nKnowledge of Logging Policies: Understanding of general user and network activity logging policies is desirable for developing effective security policy recommendations. India Consulting Hybrid Professional CHENNAI, IN CHENNAI (0063) IBM India Private Limited Administration Event Management Infrastructure Logging Management Mitigation National Institute of Standards and Technology Network Security Optimization Security Security Information and Event Management Tactics Cybersecurity Cloud security Endpoint Detection and Response MITRE Adversarial Tactics, Techniques & Common Knowledge Framework Risk Policy Development Threat Analysis Security Orchestration, Automation and Response Security Controls Technology Indicator Measurement","description_format":"text","description_chars":4295,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","LLM & Generative AI","Quantum Science & Computing","Quantum Computing Hardware"],"lifecycle":[{"event":"open","at":"2026-11-03T11:47:10Z"}],"visa":[],"liveness":{"score":97,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.972,"p_room":1,"age_days":2,"expected_fill_days":15,"reasons":["conf:1","wave","velocity","win:early","comp:brand"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/ibm-technical-consultant-threat-detection-content-administration-3","json_url":"https://alion.io/job/ibm-technical-consultant-threat-detection-content-administration-3.json","meta":{"generated_at":"2026-11-06T10:19:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18590,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":86},"rest":"https://alion.io/mcp/rest/get_company?id=86"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fibm-technical-consultant-threat-detection-content-administration-3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fibm-technical-consultant-threat-detection-content-administration-3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fibm-technical-consultant-threat-detection-content-administration-3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ibm-technical-consultant-threat-detection-content-administration-3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fibm-technical-consultant-threat-detection-content-administration-3"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3677711}},{"tool":"search_jobs","arguments":{"company":"ibm.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3677711},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}