Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted yesterday

Technical Consultant - TDR - Incident Handler

IBM2,479 open roles

Where
Bogota, CO
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowTechnical Consultant - TDR - Incident HandlerIBM · Bogota, CO

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on IBM's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

10.5% of postings close within 7 days. Measured by our own scanner across the market. IBM postings stay open a median of 9 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.3%3 days
  3. 10.5%7 days
  4. 15.9%14 days
  5. 34.1%30 days
This job: posted yesterday

IBM median: 9 days open

The posting

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

As a Technical Consultant: Threat Detection Response & Intelligence, you play a vital role in safeguarding an organization's digital infrastructure by identifying, analyzing, and mitigating cyber threats. This position involves using a variety of cybersecurity tools to monitor, prioritize, investigate, and respond to security incidents. Your primary responsibilities will include:

  • Lead and execute end-to-end security incident response activities, from detection to containment, eradication, and recovery.
  • Participate directly in critical security incidents, including ransomware, intrusions, APT activity, and insider threats.
  • Perform advanced incident investigations using EDR/XDR telemetry, SIEM data, and forensic artifacts.
  • Conduct digital forensics on endpoints and servers, including memory, disk, and system artifact analysis.
  • Perform root cause analysis (RCA) and determine the scope and impact of security incidents.
  • Investigate adversary behavior using MITRE ATT&CK and map TTPs to incident activity.
  • Correlate logs and security events using SIEM platforms to support investigations.
  • Coordinate technical response efforts with SOC, IT, Legal, and business teams during incident response and crisis situations.
  • Develop, maintain, and execute CSIRT playbooks and response procedures.
  • Produce forensic documentation and post-incident reports, including timelines, impact assessments, and remediation recommendations.
  • 3+ years of experience in incident response, DFIR, or CSIRT roles, handling advanced threats.
  • Proven hands-on experience investigating ransomware, APTs, intrusions, and insider threat incidents.
  • Strong experience with EDR/XDR platforms, such as Microsoft Defender, CrowdStrike, SentinelOne, and Cortex XDR.
  • Practical knowledge of digital forensics and DFIR tools, including Velociraptor, FTK, EnCase, Autopsy, and Volatility.
  • Strong skills in log analysis and event correlation using SIEM technologies.
  • Solid understanding of Windows, Linux, and Active Directory environments.
  • Experience performing MITRE ATT&CK–based investigations and adversary TTP analysis.
  • Familiarity with incident response frameworks, including NIST SP 800-61, NIST CSF, and ISO/IEC 27035.
  • Basic experience working in cloud environments such as Azure and AWS.
  • Ability to work under pressure during high-impact security incidents.
  • Intermediate English level (technical reading and communication).
  • Relevant security and incident response certifications, such as GCIH, GCED, GCFA, SC-200, or vendor-specific DFIR / EDR certifications.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against IBM's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on IBM's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    IBM's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.