{"id":3448759,"url":"https://alion.io/job/ibm-technical-consultant-threat-detection-content-administration","title":"Technical Consultant-Threat Detection Content & Administration","company":{"id":86,"name":"IBM","domain":"ibm.com","url":"https://alion.io/company/ibm","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"IBM Careers","truth_index":{"grade":"A","score":100,"open_postings":43,"ghost_share":0,"stale_share":0.14,"repost_share":0.07,"time_to_fill_p50_days":15,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Mumbai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-29T10:00:16Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-04T02:54:24Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You'll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you'll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You'll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences. As a Technical Consultant in Threat Detection Content & Administration, you will manage and maintain security technology infrastructure, including SIEM, SOAR, EDR, AV, and Cloud security controls. You will develop and deploy use cases, rules, and security policy recommendations to ensure efficient infrastructure functionality. Your primary responsibilities will include:\nManage Security Infrastructure: Manage and maintain security technology infrastructure, ensuring that systems are patched, upgraded, and functioning efficiently. This includes developing use cases, rules, and run books, and deploying them to the client environment.\nAnalyze System Activity: Analyze and translate system and network activity, indicators of compromise, and attacker tactics to identify malicious activity, applying the MITRE ATT&CK framework to classify attacks and assess risk.\nDevelop Security Policy: Develop and recommend security policy based on expertise in Security Incident & Event Management (SIEM), Endpoint Detection and Response technology, anti-malware, anti-spam, network security technologies, and general user and network activity logging policies.\nOptimize Security Controls: Tune and optimize security controls, including SIEM, SOAR, EDR, AV, and Cloud security controls, to ensure efficient threat detection and response.\nEvaluate Risk: Evaluate the risk of threats using the NIST Cybersecurity framework and provide recommendations to mitigate identified risks.\nSecurity Technology Infrastructure Management: Experience with managing and maintaining security technology infrastructure, including SIEM, SOAR, EDR, AV, and Cloud security controls, ensuring systems are patched, upgraded, and functioning efficiently.\nThreat Analysis and Mitigation: Experience with analyzing and translating system and network activity, indicators of compromise, and attacker tactics to identify malicious activity, utilizing frameworks such as MITRE ATT&CK for attack classification and risk assessment.\nSecurity Policy Development: Experience with developing and recommending security policy based on expertise in Security Incident & Event Management (SIEM), Endpoint Detection and Response technology, anti-malware, anti-spam, network security technologies, and general user and network activity logging policies.\nSecurity Control Optimization: Experience with tuning and optimizing security controls, including SIEM, SOAR, EDR, AV, and Cloud security controls, to ensure efficient threat detection and response.\nRisk Evaluation and Mitigation: Experience with evaluating the risk of threats using the NIST Cybersecurity framework and providing recommendations to mitigate identified risks.\nProficiency in NIST Framework: Experience with utilizing the NIST Cybersecurity framework to evaluate the risk of threats and provide recommendations to mitigate identified risks.\nMITRE ATT&CK Framework Knowledge: Experience with applying the MITRE ATT&CK framework to classify attacks, identify attack attribution, and assess risk.\nCloud Security Controls Expertise: Experience with managing and maintaining cloud security controls to ensure efficient threat detection and response. India Consulting Hybrid Professional Mumbai, IN Mumbai (0063) IBM India Private Limited Administration Event Management Infrastructure Logging Mitigation National Institute of Standards and Technology Network Security Optimization Risk Assessment Security Security Information and Event Management Tactics Cybersecurity Infrastructure Management Endpoint Detection and Response MITRE Adversarial Tactics, Techniques & Common Knowledge Framework Risk Policy Development Threat Analysis Security Orchestration, Automation and Response Security Controls Technology Threat Detection Indicator Measurement","description_format":"text","description_chars":4433,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","LLM & Generative AI","Quantum Science & Computing","Quantum Computing Hardware"],"lifecycle":[{"event":"open","at":"2026-10-29T10:00:16Z"}],"visa":[],"liveness":{"score":85,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.846,"p_room":1,"age_days":4,"expected_fill_days":15,"reasons":["conf:3","velocity","win:early","comp:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/ibm-technical-consultant-threat-detection-content-administration","json_url":"https://alion.io/job/ibm-technical-consultant-threat-detection-content-administration.json","meta":{"generated_at":"2026-11-04T03:34:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5520,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":86},"rest":"https://alion.io/mcp/rest/get_company?id=86"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fibm-technical-consultant-threat-detection-content-administration"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fibm-technical-consultant-threat-detection-content-administration"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fibm-technical-consultant-threat-detection-content-administration"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ibm-technical-consultant-threat-detection-content-administration\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fibm-technical-consultant-threat-detection-content-administration"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3448759}},{"tool":"search_jobs","arguments":{"company":"ibm.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3448759},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}