Key Responsibilities:
- Install, configure, and maintain the IBM QRadar SIEM platform to ensure efficient log collection, analysis, and threat detection.
- Monitor system health, troubleshoot issues, and implement necessary updates and patches.
- Integrate QRadar with various security devices, applications, and platforms for comprehensive log aggregation.
- Analyze security events, incidents, and alerts to provide timely and effective responses.
- Play a key role in incident response activities, investigating security incidents and collaborating with other teams for resolution.
- Develop and refine incident response procedures to enhance the organization’s cybersecurity posture.
- Possess familiarity and proficiency with other leading SIEM solutions, such as Splunk, ArcSight, or LogRhythm.
- Stay updated on emerging trends and advancements in the SIEM landscape.
- Demonstrate a strong understanding of cybersecurity principles, threat landscapes, and SOC trends.
- Collaborate with the cybersecurity team to implement and enhance security controls.
Qualifications:
- Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
- Proven experience in IBM QRadar SIEM administration, including installation and configuration.
- Also, should know other leading SIEM solutions.
- Solid understanding of cybersecurity concepts, incident response, and Security Operations Center (SOC) operations.
- Relevant certifications (e.g., IBM QRadar Certified Deployment Professional, CompTIA Security+) are a plus.
- Strong communication and collaboration skills.