Qradar Platform Support

Sisainfosec; Bengaluru; On-site; INR 400,000 - 640,000; Full time

Job summary

Sisainfosec in Bengaluru seeks a Junior Engineer for IBM QRadar Platform Support to help maintain stability, availability, and performance of the QRadar SIEM infrastructure. The role centers on day-to-day platform operations, log source onboarding, and first‑level troubleshooting for SOC monitoring.

You will assist with DSM mappings, log parsing validation, and patch/testing under supervision; collaborate with SOC analysts and platform teams, document changes, and pursue health‑check automation

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity or related field.
• Postgraduate diploma or coursework in Information Security / Network Security preferred.
• IBM QRadar Foundation or Associate Certification (preferred).
• CompTIA Security+ / CEH or equivalent foundational cybersecurity certification.

Responsibilities

• Monitor and maintain QRadar components and health metrics.
• Assist with log source onboarding and DSM parsing validation.
• Review parsing errors and escalate to seniors as needed.
• Support patch management, upgrades, and version validation under supervision.
• Collaborate with SOC analysts and platform teams to ensure event integrity.

Skills

QRadar SIEM architecture

Linux administration

Networking fundamentals

Syslog

SNMP

WinCollect

API

DSM parsing basics

Log analysis

Scripting Bash

Python scripting

Incident response / SOC operations

Education

Bachelor's degree in CS/IT/Cybersecurity

Postgraduate diploma in Information Security

Tools

WinCollect

Syslog

SNMP

API

Job description

The QRadar Platform Support – Junior Engineer plays a critical role in maintaining the stability, availability, and performance of the IBM QRadar SIEM infrastructure. This role focuses on day-to-day platform operations, log source integration, and first-level troubleshooting, ensuring that SOC operations receive clean, normalized, and continuous telemetry for monitoring and detection.

Roles and Responsibilities

Operational Support

• Monitor and maintain the health of QRadar components (Console, Event Processors, Event Collectors, Flow Processors).
• Perform daily checks for EPS rate, storage utilization, and system performance metrics.
• Execute routine administrative tasks: user account creation, RBAC management, and scheduled backup verification.
• Generate scheduled operational and health reports for internal SOC and platform performance reviews.
• Respond to platform-related alerts, performing initial triage and escalating as needed.

Technical Responsibilities

• Assist in log source onboarding, testing syslog/API connectivity, and validating DSM mapping.
• Support DSM customization and log parsing validation for new or non-standard sources.
• Review parsing errors and collaborate with senior engineers to correct event categorization issues.
• Help with QRadar patch management, upgrade testing, and version validation under supervision.
• Participate in correlation rule testing, dashboard tuning, and offense verification for rule effectiveness.
• Document configuration changes, SOP updates, and recurring issue resolutions.

Process and Collaboration

• Work closely with SOC analysts, platform teams, and incident responders to ensure event integrity.
• Follow change management and incident escalation protocols.
• Maintain compliance with security standards for log retention and access control.
• Participate in internal reviews, root cause analysis sessions, and continuous improvement initiatives.

Mandatory Skills Required

• Foundational understanding of QRadar SIEM architecture (Console, EC, EP, Flow Collector).
• Familiarity with Linux administration, networking fundamentals, and event logging protocols (Syslog, SNMP, WinCollect, API).
• Awareness of SIEM correlation logic, event normalization, and DSM parsing basics.
• Hands-on experience in log analysis, data ingestion validation, and dashboard usage.
• Scripting knowledge (Bash, Python) for automation or health-check reporting.
• Exposure to incident response or SOC operations (preferred).

Educational Requirements

• Bachelor’s degree in Computer Science, Information Technology, or Cybersecurity.
• Postgraduate diploma or coursework in Information Security / Network Security preferred.

Certifications (Mandatory / Preferred)

• IBM QRadar Foundation or Associate Certification (preferred).
• CompTIA Security+ / CEH or equivalent foundational cybersecurity certification