Security Engineer – QRadar SIEM Tuning & Logs (Remote)

Viqu Limited; Greater London; Hybrid; GBP 60.000 - 90.000; Vollzeit

Benefits dieser Stelle

Referral bonus up to £1,000

Zusammenfassung

Viqu Limited is seeking a hands-on Security Engineer to own and optimise SIEM rules, alert tuning and log aggregation, primarily within IBM QRadar. The role focuses on improving threat detection and ensuring high-quality security logs are available to a third‑party SOC.

There may also be an opportunity to migrate to Splunk. The role requires hands-on QRadar experience, strong log and SIEM skills, and is based in London with remote options.

Qualifikationen

• Hands-on with IBM QRadar SIEM and tuning
• Experience building, maintaining and refining SIEM detection rules
• Understanding of security logs, sources and event normalisation
• Experience with log aggregation/forwarding technologies
• Experience supporting SOC operations

Aufgaben

• Own, maintain and tune IBM QRadar SIEM rules, correlation logic and alerts
• Review and optimise detection use cases to improve threat visibility and reduce false positives
• Configure and maintain log collection, parsing, normalisation and aggregation
• Support log aggregation using Fluentd, Cribl or similar technologies
• Ensure relevant security logs are ingested and available to the third-party SOC
• Troubleshoot log ingestion, parsing and SIEM detection issues
• Support planning and potential migration from QRadar to Splunk

Kenntnisse

QRadar SIEM

SIEM rule tuning

SOC collaboration

Log ingestion

Tools

Fluentd

Cribl

Fluent Bit

Splunk

Jobbeschreibung

Viqu Limited is seeking a hands-on Security Engineer to own and optimise SIEM rules, alert tuning and log aggregation, primarily within IBM QRadar. The role focuses on improving threat detection and ensuring high-quality security logs are available to a third‑party SOC.

There may also be an opportunity to migrate to Splunk. The role requires hands-on QRadar experience, strong log and SIEM skills, and is based in London with remote options.