Ibm Qradar Siem Engineer

Description:

We are seeking a skilled IBM QRadar SIEM Engineer to deploy, configure, and maintain IBM QRadar and its associated components. The ideal candidate should have deep expertise in log management, event correlation, incident detection, and security monitoring to enhance the organization's cybersecurity posture.

Key Responsibilities:
Deploy, configure, and maintain IBM QRadar SIEM and its components (Event Collectors, Flow Processors, Data Nodes).
Manage log sources and event collection mechanisms to ensure comprehensive visibility.
Monitor system health and optimize QRadar performance (CPU, memory, storage, event processing).
Create, fine-tune, and manage custom correlation rules to enhance threat detection.
Troubleshoot and resolve log collection issues, DSM parsing errors, and rule misconfigurations.
Apply patches, updates, and firmware upgrades while ensuring system stability.
Conduct threat hunting and forensic analysis using QRadar logs and offense data.
Configure AQL (Ariel Query Language) searches to extract actionable insights from logs.
Work closely with SOC, Incident Response, and Threat Intelligence teams for effective threat mitigation.
Maintain compliance with ISO 27001, NIST, GDPR, PCI-DSS, and other regulatory frameworks.
Required Skills & Qualifications:
5+ years of experience in IBM QRadar SIEM deployment, configuration, and administration.
Strong knowledge of log management, event correlation, and network security concepts.
Experience in troubleshooting QRadar components, DSMs, and log ingestion issues.