Q Radar Administrator

Cyber Gate Defense; United Arab Emirates; On-site; AED 120,000 - 160,000; Full time

Job summary

A cybersecurity solutions provider seeks an experienced professional to manage IBM QRadar SIEM deployments in the United Arab Emirates. The role involves scaling, upgrading, and maintaining SIEM infrastructure while ensuring data quality and security. You'll develop custom parsers and correlation rules, conduct performance optimizations, and collaborate with IT teams. Proficiency in scripting languages like Python and PowerShell is essential, as is experience in security device integration and support. Competitive compensation is offered.

Qualifications

• Experience managing and scaling IBM QRadar SIEM deployments.
• Ability to perform upgrades and patches on SIEM infrastructure.
• Strong knowledge of security device integration and configuration.

Responsibilities

• Manage IBM QRadar SIEM deployments and maintenance.
• Onboard data from various security devices while ensuring quality.
• Develop custom parsers and correlation rules for QRadar.

Skills

IBM QRadar SIEM

Scripting (Python, PowerShell)

Security device integration

Data quality assurance

Communication skills

Job description

Role & responsibilities

• Manage, maintain, and scale IBM QRadar SIEM deployments, including Console, Event Processors, Data Nodes, and Collectors.
• Perform upgrades, patches, and component deployments on the QRadar/SIEM infrastructure.
• Onboard data from various security devices (e.g., Firewall, IDS) and general IT systems, ensuring data quality and integrity.
• Develop custom QRadar parsers, correlation rules, and Use Cases, fine‑tuning them based on inputs from the SOC team.
• Create robust QRadar content, including advanced dashboards, reports, and alerts for security monitoring.
• Conduct regular health checks and optimize QRadar performance for searches and data ingestion.
• Investigate and debug alerts generated within the QRadar console.
• Review QRadar configurations for potential security weaknesses and adherence to best practices.
• Perform Quality Assurance (QA) on SIEM content developed by other team members.
• Contribute to incident response efforts by providing expert QRadar/SIEM data analysis.
• Utilize scripting languages (e.g., Python, PowerShell) for automation and customization where advantageous.
• Exhibit excellent communication and customer interaction skills, collaborating effectively with SOC analysts, IT teams, and stakeholders.
• Experience with security device and general IT installations, configuration, and troubleshooting (e.g., Firewall, IDS) as it pertains to data integration with QRadar.