QRadar Administrator

Are you an experienced QRadar Admin passionate about SIEM engineering and security operations? We're looking for a skilled professional to manage enterprise QRadar environments, onboard log sources, develop detection use cases, and support SOC operations.

Key Responsibilities:
🔹 Deploy, configure, and administer IBM QRadar (Standalone & Distributed environments)
🔹 Manage QRadar architecture, upgrades, patching, backups, and platform health
🔹 Onboard log sources via Syslog, APIs, Universal Forwarders, and cloud integrations
🔹 Configure indexes, retention policies, parsing, timestamps, and field extractions
🔹 Validate end-to-end log ingestion and troubleshoot data ingestion, parsing, and indexing issues
🔹 Develop, tune, and manage SIEM use cases, correlation rules, and detection content
🔹 Monitor licence utilisation, platform performance, and optimise system resources
🔹 Create dashboards, operational reports, and support threat hunting & SOC investigations
🔹 Enhance detection coverage and contribute to continuous platform improvements

Required Skills & Expertise:
✅ 5+ years of hands-on experience in QRadar Administration
✅ Strong experience with log source integration and onboarding processes
✅ Expertise in log validation and troubleshooting methodologies
✅ Hands-on experience in SIEM use case development, tuning, and management
✅ Strong understanding of security monitoring concepts and detection engineering fundamentals
✅ Knowledge of basic security controls, their functionality, and their role within enterprise security architecture
✅ Experience in security event analysis and investigation workflows
✅ Strong knowledge of SIEM architecture, event correlation, and log management
✅ Excellent analytical, troubleshooting, and problem-solving skills