Lead QRadar Architect for SOC Dashboards & Integrations

Experis ManpowerGroup Sp. z o.o.; Poland; On-site; PLN 120,000 - 190,000; Full time

Job description

We are looking for a seasoned Technical Solution Architect specializing in QRadar to support and enhance our Security Operations Center (SOC) capabilities. This role is focused on building efficient dashboards, improving data parsing and correlation, and integrating critical systems into the existing SIEM infrastructure.

Responsibilities:

• Design and build custom dashboards tailored for SOC operators.

• Develop and optimize correlation rules to enhance threat detection.

• Implement new custom parsers and enhance existing ones to improve log data normalization.

• Tune and optimize frequently used queries for performance and relevance.

• Integrate critical systems not previously connected to SIEM for full visibility.

• Adapt mechanisms from QRadar Network Insights (QNI) to enhance network threat detection.

• Reconfigure and fine-tune the behavioral analytics component to align with evolving security needs.

• Collaborate with SOC analysts, threat hunters, and infrastructure teams to ensure effective implementation of QRadar solutions.

• Ensure ongoing documentation and knowledge transfer related to all developed functionalities.

Requirements:

• Proven experience as a QRadar Architect or Engineer, ideally in a large-scale SOC environment.

• Strong expertise in QRadar components: correlation rules, custom dashboards, AQL queries, and log source management.

• Hands-on experience with log parsers (DSM Editor, custom parsing, normalization techniques).

• Experience with QNI (QRadar Network Insights) and behavioral analytics modules.

• Knowledge of SIEM integration processes and best practices for onboarding new log sources.

• Strong problem-solving skills and the ability to work independently and proactively.

• Familiarity with scripting (e.g., Python, Bash) for automation and customization is a plus.

• Effective communication and documentation skills.

• Security certifications (e.g., IBM QRadar Certified Specialist, CEH, CISSP, etc.) are an advantage.