Senior QRadar Platform Engineer

Responsibilities

• Own the overall health, stability, performance, scalability, and operational success of the IBM QRadar platform.
• Onboard and troubleshoot log sources, including parsing, DSMs, custom properties, log source extensions, event normalization, and protocol configurations.
• Analyze and tune indexes, event and flow pipelines, EPS/FPM capacity, searches, reports, dashboards, and the Ariel database.
• Manage QRadar architecture, infrastructure capacity, storage, high availability, disaster recovery, retention, patching, upgrades, licensing, certificates, backups, access controls, and hardening.
• Develop platform standards, operational procedures, runbooks, health checks, governance practices, and a strategic QRadar roadmap.
• Lead integrations and collaborate with Security Operations, Infrastructure, Networking, Identity, Cloud, Application, and Compliance teams.
• Serve as the highest escalation point for complex QRadar issues and mentor, train, delegate to, and develop the SIEM team.

Requirements

• At least 7 years of IT security experience and 5 years of QRadar experience.
• Expert hands-on experience designing, implementing, administering, optimizing, and architecting enterprise-scale IBM QRadar deployments.
• Deep knowledge of distributed QRadar architecture, including Consoles, Event and Flow Collectors and Processors, Data Nodes, App Hosts, High Availability, and Disaster Recovery.
• Advanced experience with log-source onboarding, ingestion troubleshooting, DSMs, Universal DSMs, custom extensions, custom properties, parsing, normalization, and diverse enterprise integrations.
• Advanced experience diagnosing EPS bottlenecks, Ariel database issues, indexing inefficiencies, event-pipeline constraints, search latency, application performance, and infrastructure issues.
• Expert knowledge of AQL, dashboards, saved searches, reports, detection metrics, compliance reporting, and custom analytics.
• Strong understanding of log management, network protocols, operating systems, authentication platforms, cloud services, security controls, and common attack methodologies.
• Proven technical leadership, mentoring, workload delegation, peer review, escalation management, documentation, knowledge transfer, and stakeholder communication.
• English proficiency and proficiency with Microsoft Office, including Word, Excel, and PowerPoint.
• IBM Certified Associate or Deployment Professional for QRadar SIEM is preferred, along with QRadar apps and App Framework experience, rule/offense tuning, QRadar migrations, consulting or staff-augmentation experience, and handoff documentation skills.

Benefits

• Three-month staff augmentation engagement anticipated to renew month to month, starting as soon as possible.
• 40 hours per week with no travel required.
• Competitive benefits, continuous training, professional development, and access to industry-certified experts are offered by New Era Technology.