Full-Time SIEM Engineer with QRadar

Role: SIEM Engineer

Location: Remote

Position: 1

Required Skills:

• QRadar SIEM
• AQL
• Analytical Skills
• Red Hat Linux administration
• Bash
• DSM
• Database Management
• Excellent Verbal Communication Skills
• IBM QRadar SIEM
• Intrusion Detection System (IDS)
• Linux
• Network Engineering
• Networking Protocols
• Performance Monitoring and Metrics
• PostgreSQL
• Problem Solving
• Python (Programming Language)
• SIEM
• SOAR
• Scripting
• Security Operations
• Software Troubleshooting
• Ticketing Systems
• Use case creation
• Vulnerability Scanning
• Preferred Skills Palo Alto XSIAM and XDR, Cribl, Splunk, FireEye EDR security tools

Responsibilities:

• Primary engineer managing SIEM platform with IBM QRadar
• Supporting delivery for Managed Security Services to a State Government client
• Providing timely, accurate, planned completion and implementation of security services
• Ensuring 24x7x365 support
• Leading primary day-to-day SIEM interactions with project team and State cybersecurity staff
• Managing platform health and performing upgrades, including managing deployed sensors and collectors
• Interacting with SOC analysts to tune alerts and use cases, including integrations with client
• Hands-on QRadar engineering and configuration experience required
• Adding new log sources to existing QRadar, configuring use cases, alerts, etc.
• Conducting Nessus scans
• Ensuring successful integration into the overall application/system
• Performing troubleshooting, complex requirements/solutions
• Providing assistance/coaching with QRadar search queries and dashboards
• Maintaining strong partnerships with Detection & Response leadership and other teams
• Investigating and resolving QRadar performance issues (event drops, parsing problems, unknown events)
• Performing deep-dive analysis of log source integration issues and implementing solutions
• Troubleshooting and optimizing event collection, parsing, and normalization
• Creating and maintaining custom parsers, DSMs, and log source extensions
• Monitoring system health, storage utilization, and EPS/FPS metrics
• Developing custom reports and dashboards for security metrics and compliance
• Fine-tuning correlation rules and optimizing system performance
• Performing root cause analysis for SIEM-related incidents

What is the last date for applying to the job?

Which countries are accepted for this remote job?