Entry Level Siem Content Developer Jobs (NOW HIRING)

At IBM Consulting UK FutureNow, you’ll build a career at the forefront of hybrid cloud and AI, working with leading clients across the public and private sectors.

You’ll collaborate with top industry professionals, gain hands on experience with cutting edge technologies, and deliver solutions that create real business impact. From day one, you’ll work on meaningful, high profile programmes that stretch your skills and accelerate your growth.

We invest heavily in you—supporting continuous learning, in demand skills development, and long term career progression. You’ll thrive in a flexible, inclusive environment that values curiosity, encourages reinvention, and recognises what makes you unique.

We offer:

• Tools and policies to support your work-life balance from flexible working approaches, sabbatical programs, paid paternity leave, maternity leave and an innovative maternity returners scheme
• More traditional benefits, such as 25 days holiday (in addition to public holidays), private medical, dental & optical cover, online shopping discounts, an Employee Assistance Program, life assurance and a group pension plan through salary sacrifice

In this role, you'll work in one of our IBM Consulting FutureNow Centers, where we deliver deep technical and industry expertise to a wide range of public and private sector clients around the world. Our delivery centers offer our clients locally based skills and technical expertise to drive innovation and adoption of new technology.

As a Senior Security Consultant – Threat Management, you will help clients strengthen and modernise their Security Operations, Detection & Response, and Threat Management capabilities across cloud, hybrid, and on-premise environments.

Working closely with client security teams, architects, and operational stakeholders, you will design and improve detection strategies, develop high-quality detection content, enhance SIEM/SOAR capabilities, and drive measurable security outcomes through threat-informed defence.

You will operate as a trusted technical consultant, combining hands‑on expertise with strong stakeholder engagement to deliver client‑facing advisory, engineering, and transformation engagements.

Key responsibilities include:

• Designing, implementing, and improving SIEM and security monitoring capabilities.
• Developing and tuning detection content, analytics rules, and correlation logic.
• Conducting threat hunting exercises aligned to MITRE ATT&CK and client threat profiles.
• Supporting incident response, investigation, and post-incident improvement activities.
• Delivering SOC maturity assessments, capability reviews, and uplift roadmaps.
• Integrating and optimising telemetry across cloud, identity, endpoint, network, and application environments.
• Designing and improving SOAR playbooks and automated response workflows.
• Advising clients on detection engineering standards, operational processes, and security monitoring strategy.
• Producing high-quality technical documentation, runbooks, operating procedures, and client deliverables.
• Leading workshops and presenting findings to both technical and non-technical stakeholders.

None

Bachelor's Degree

• Demonstrable experience within Threat Management, Detection Engineering, Security Operations, Incident Response, or Threat Hunting environments.
• Hands-on experience with one or more major SIEM platforms such as:
  Microsoft Sentinel
  - Splunk
  - QRadar
  - Elastic
  - Chronicle
  - LogRhythm
• Experience developing detection logic, analytics rules, use cases, and threat hunting content.
• Strong understanding of MITRE ATT&CK and threat-informed defence principles.
• Experience supporting or leading incident investigation and response activities.
• Knowledge of cloud security monitoring across Azure, AWS, or GCP environments.
• Experience working with EDR/XDR technologies and associated telemetry.
• Proficiency in KQL, SPL, Python, PowerShell, or equivalent security-focused query/scripting languages.
• Ability to communicate effectively with both technical and business stakeholders.
• Experience operating within regulated environments such as public sector, financial services, healthcare, telecommunications, or critical national infrastructure.

This role is subject to pre-employment screening in line with the UK Government’s Baseline Personnel Security Standard (BPSS). An additional range of Personal Security Controls referred to as National Security Vetting (NVS) may apply, this could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV).

• Previous consulting or client-facing delivery experience.
• Experience delivering SOC transformation, SOC uplift, or Security Operations improvement programmes.
• Experience building, tuning, or optimising SOAR capabilities and automated response workflows.
• Experience conducting threat-led assessments, purple team exercises, or threat modelling activities.
• Experience with threat intelligence integration, enrichment pipelines, and intelligence-led detection development.
• Exposure to cloud-native security services such as:
  - Microsoft Defender XDR
  - Microsoft Sentinel
  - AWS GuardDuty
  - AWS Security Hub
  - Google Security Operations
• Understanding of detection-as-code, CI/CD pipelines, or modern security engineering practices.
• Relevant industry certifications such as:
  - SC-200
  - AZ-500
  - GCIH
  - GCIA
  - GCDA
  - Splunk ES certifications
  - Microsoft Security certifications
• Experience leading technical workshops, mentoring junior consultants, or shaping client security roadmaps.

IBM Consulting is IBM’s consulting and global professional services business, with market leading capabilities in business and technology transformation. With deep expertise in many industries, we offer strategy, experience, technology, and operations services to many of the most innovative and valuable companies in the world. Our people are focused on accelerating our clients’ businesses through the power of collaboration. We believe in the power of technology responsibly used to help people, partners and the planet.

In a world where technology never stands still, we understand that, dedication to our clients success, innovation that matters, and trust and personal responsibility in all our relationships, lives in what we do as IBMers as we strive to be the catalyst that makes the world work better.

Being an IBMer means you’ll be able to learn and develop yourself and your career, you’ll be encouraged to be courageous and experiment everyday, all whilst having continuous trust and support in an environment where everyone can thrive whatever their personal or professional background.

Our IBMers are growth minded, always staying curious, open to feedback and learning new information and skills to constantly transform themselves and our company. They are trusted to provide on‑going feedback to help other IBMers grow, as well as collaborate with colleagues keeping in mind a team focused approach to include different perspectives to drive exceptional outcomes for our customers. The courage our IBMers have to make critical decisions everyday is essential to IBM becoming the catalyst for progress, always embracing challenges with resources they have to hand, a can-do attitude and always striving for an outcome focused approach within everything that they do.

Are you ready to be an IBMer?

IBM’s greatest invention is the IBMer. We believe that through the application of intelligence, reason and science, we can improve business, society and the human condition, bringing the power of an open hybrid cloud and AI strategy to life for our clients and partners around the world.

Restlessly reinventing since 1911, we are not only one of the largest corporate organizations in the world, we’re also one of the biggest technology and consulting employers, with many of the Fortune 500 companies relying on the IBM Cloud to run their business.

At IBM, we pride ourselves on being an early adopter of artificial intelligence, quantum computing and blockchain. Now it’s time for you to join us on our journey to being a responsible technology innovator and a force for good in the world.

IBM is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, neurodivergence, age, or other characteristics protected by the applicable law. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.

IBM wants you to bring your whole self to work and for you this might mean the ability to work flexibly. If you are interested in a flexible working pattern, please talk to our recruitment team to find out if this is possible in the current working environment.

Job Title

Cyber Security Consultant - Threat Management

Job ID

127210

City / Township / Village

State / Province

Hampshire, London, City of, Manchester, Leicester

Country

United Kingdom

Work arrangement

Hybrid

Area of work

Consulting

Employment type

Regular

Position type

Professional

Up to 80% or 4 days a week (home on weekends - based on project requirements)

Company

Shift

General (daytime)

Is this role a commissionable/sales incentive based position?