QRadar SIEM Engineer

Company Overview

Provide a brief description of the company, its industry, and culture if details are given, otherwise remove this section.

Job Summary

We are seeking a skilled and proactive QRadar SIEM Engineer to join our cybersecurity team. The ideal candidate will be responsible for the deployment, configuration, and management of QRadar SIEM, along with integrating diverse data sources, supporting Security Operations Center (SOC) operations, and ensuring timely incident detection and response.

Responsibilities

• Deploy, configure, and maintain IBM QRadar SIEM infrastructure.
• Onboard and integrate various data sources (e.g., firewalls, servers, cloud services) into QRadar.
• Manage and maintain log sources, custom parsers, and DSM configurations.
• Collaborate with the SOC team to build and refine use cases, correlation rules, and alerts.
• Provide support for Linux and Windows systems related to SIEM data collection and troubleshooting.
• Analyze and resolve issues related to log ingestion, event correlation, and offense generation.
• Participate in incident response workflows and support forensic investigations.
• Create and maintain technical documentation, Standard Operating Procedures (SOPs), and configuration records.
• Work closely with clients or internal stakeholders for requirement gathering, onboarding, and issue resolution.
• Conduct performance tuning and regular health checks on the SIEM environment.

Qualifications

• 3+ years of experience working with QRadar SIEM in a security operations environment.
• Strong understanding of SIEM fundamentals, event lifecycle, and threat detection.
• Hands-on experience with Linux and Windows system administration.
• Proven ability to onboard and integrate various log sources into QRadar.
• Experience in SOC workflows, including alert triage, escalation, and response coordination.
• Excellent problem-solving skills and analytical thinking.
• Strong communication skills and experience in client interaction.
• Ability to create detailed documentation and reports for technical and non-technical stakeholders.

Preferred Skills

• IBM QRadar certifications (e.g., QRadar Certified Deployment Professional).
• Familiarity with scripting (Python, Bash) for automation and log parsing.
• Experience with threat intelligence platforms and integration with QRadar.

Experience

• Minimum of 3 years of relevant experience in a security operations environment.

Environment

• Not specified.

Salary

• Not specified.

Growth Opportunities

Highlight potential career advancement opportunities within the company. if provided, otherwise remove this section.

Benefits

• List of offered benefits, such as insurance, paid leave, work policies, etc. if provided, otherwise remove this section.