Qradar Platform Support

SISA; Bengaluru; On-site; INR 400,000 - 600,000; Full time

Job summary

SISA in Bengaluru is seeking a QRadar Platform Support – Junior Engineer to maintain the stability and performance of the IBM QRadar SIEM infrastructure. You will perform day-to-day operations, ensuring that SOC receives continuous telemetry for monitoring.

The ideal candidate should have a Bachelor's degree in Computer Science or related fields and foundational skills in QRadar architecture, Linux administration, and networking protocols.

Qualifications

• Foundational skills in QRadar SIEM and basic Linux administration.
• Knowledge of networking protocols and event logging.
• Experience in log analysis and data ingestion validation.

Responsibilities

• Monitor and maintain QRadar component health.
• Perform daily EPS rate checks and system performance metrics.
• Assist in log source onboarding and validation.

Skills

Foundational understanding of QRadar SIEM architecture

Familiarity with Linux administration

Networking fundamentals

Event logging protocols

Scripting knowledge

Exposure to incident response

Education

Bachelor’s degree in Computer Science

Postgraduate diploma in Information Security

Job description

Role Objective

The QRadar Platform Support – Junior Engineer plays a critical role in maintaining the stability, availability, and performance of the IBM QRadar SIEM infrastructure. This role focuses on day-to-day platform operations, log source integration, and first-level troubleshooting, ensuring that SOC operations receive clean, normalized, and continuous telemetry for monitoring and detection.

Roles and Responsibilities

• Monitor and maintain the health of QRadar components (Console, Event Processors, Event Collectors, Flow Processors).
• Perform daily checks for EPS rate, storage utilization, and system performance metrics.
• Execute routine administrative tasks: user account creation, RBAC management, and scheduled backup verification.
• Generate scheduled operational and health reports for internal SOC and platform performance reviews.
• Respond to platform-related alerts, performing initial triage and escalating as needed.
• Assist in log source onboarding, testing syslog/API connectivity, and validating DSM mapping.
• Support DSM customization and log parsing validation for new or non-standard sources.
• Review parsing errors and collaborate with senior engineers to correct event categorization issues.
• Help with QRadar patch management, upgrade testing, and version validation under supervision.
• Participate in correlation rule testing, dashboard tuning, and offense verification for rule effectiveness.
• Document configuration changes, SOP updates, and recurring issue resolutions.
• Work closely with SOC analysts, platform teams, and incident responders to ensure event integrity.
• Follow change management and incident escalation protocols.
• Maintain compliance with security standards for log retention and access control.
• Participate in internal reviews, root cause analysis sessions, and continuous improvement initiatives.

Mandatory Skills

• Foundational understanding of QRadar SIEM architecture (Console, EC, EP, Flow Collector).
• Familiarity with Linux administration, networking fundamentals, and event logging protocols (Syslog, SNMP, WinCollect, API).
• Awareness of SIEM correlation logic, event normalization, and DSM parsing basics.
• Hands‑on experience in log analysis, data ingestion validation, and dashboard usage.
• Scripting knowledge (Bash, Python) for automation or health‑check reporting.
• Exposure to incident response or SOC operations (preferred).

Educational Requirements

• Bachelor’s degree in Computer Science, Information Technology, or Cybersecurity.
• Postgraduate diploma or coursework in Information Security / Network Security preferred.

Certifications (Preferred)

• IBM QRadar Foundation or Associate Certification.
• CompTIA Security+ / CEH or equivalent foundational cybersecurity certification.