Technical Solution Architect - Qradar Architecture

Experis to światowy lider rekrutacji specjalistów i kadry zarządzającej w kluczowych obszarach IT.

• Proven experience as a QRadar Architect or Engineer, preferably in a large-scale SOC environment.
• Strong expertise in QRadar components: correlation rules, custom dashboards, AQL queries, and log source management.
• Hands-on experience with log parsers including DSM Editor, custom parsing, and normalization techniques.
• Experience with QNI (QRadar Network Insights) and behavioral analytics modules.
• Knowledge of SIEM integration processes and onboarding best practices for new log sources.
• Strong problem-solving skills and ability to work independently and proactively.
• Familiarity with scripting languages such as Python and Bash for automation and customization is a plus.
• Effective communication and documentation skills.
• Security certifications like IBM QRadar Certified Specialist, CEH, and CISSP are advantageous.

• Design and build custom dashboards tailored for SOC operators.
• Develop and optimize correlation rules to enhance threat detection.
• Implement new custom parsers and enhance existing ones for log data normalization.
• Tune and optimize frequently used queries for performance and relevance.
• Integrate critical systems not previously connected to SIEM for full visibility.
• Adapt mechanisms from QRadar Network Insights (QNI) to improve network threat detection.
• Reconfigure and fine-tune the behavioral analytics component according to evolving security needs.
• Collaborate with SOC analysts, threat hunters, and infrastructure teams for implementation.
• Ensure ongoing documentation and knowledge transfer related to developed functionalities.