QRadar Admin

Introduction
Information and Data are some of the most important organizational assets in today’s businesses. As a Security Consultant you will be a key advisor for IBM’s clients analyzing business requirements to design and implement the best security solutions for their needs. You will apply your technical skills to find the balance between enabling and securing the client’s organization with the cognitive solutions that are making IBM the fastest growing enterprise security business in the world.

Your Role and Responsibilities
As a Security Consultant you play a pivotal role as a key advisor for IBM’s clients. Your primary responsibility is to analyze business requirements and leverage your expertise to design and implement optimal security solutions tailored to meet the unique needs of our clients. Your technical skills will be crucial in finding the delicate balance between enabling and securing our client’s organization utilizing cognitive solutions that have contributed to making IBM the fastest-growing enterprise security business globally.

Your tasks:

• QRadar Deployment and Configuration:
◦ Install configure and maintain QRadar SIEM components.
◦ Ensure proper integration with various data sources and security tools.
• System Administration:
◦ Monitor system performance and manage QRadar health including patches and updates.
◦ Troubleshoot and resolve QRadar issues ensuring minimal downtime.
• Security Monitoring and Incident Response:
◦ Develop and fine-tune correlation rules offenses and alerts to detect security incidents.
◦ Collaborate with the security team to analyze and respond to security events and incidents.
• Policy and Procedure Development:
◦ Create and maintain documentation for QRadar processes and configurations.
◦ Develop standard operating procedures and best practices for QRadar administration.
• Continuous Improvement:
◦ Stay updated with the latest security threats and vulnerabilities to enhance QRadar detection capabilities.
◦ Participate in security audits and assessments providing insights on improving QRadar effectiveness.

Required Technical and Professional Expertise
• Education:
Bachelor’s degree in Computer Science Information Technology Cybersecurity or a related field.

• Experience:
1 Minimum of 3-5 years of experience in cybersecurity or IT security roles.
2 Proven experience with IBM QRadar SIEM administration and management.

• Skills and Certifications:
1 Strong understanding of network protocols system logs and security event correlation.
2 Familiarity with security frameworks such as NIST ISO 27001 and CIS.
3 Relevant certifications such as IBM Certified Deployment Professional – QRadar SIEM are a plus.
4 Proficiency in scripting languages (e.g. Python Bash) and SQL for data manipulation and automation.

Preferred Technical and Professional Expertise

• Experience with other SIEM solutions and security tools.
• Knowledge of cloud security and integration with QRadar.
• Strong analytical and problem-solving skills.
• Excellent communication and teamwork abilities.