Technical Solution Architect - Qradar Architecture

Experis ManpowerGroup Sp. z o.o.; Poland; On-site; PLN 120,000 - 190,000; Full time

Job summary

Experis ManpowerGroup Sp. z o.o. is seeking a seasoned Technical Solution Architect for QRadar to support and enhance our SOC capabilities. You will design custom dashboards, develop correlation rules, and integrate new parsers to improve data normalization and threat detection.

Join a team focused on optimizing SIEM performance, expanding log source coverage, and delivering robust QRadar solutions. Strong scripting skills and relevant security certifications are a plus.

Qualifications

• Proven experience as a QRadar Architect or Engineer in large SOC environments.
• Strong expertise in QRadar components: correlation rules, dashboards, AQL queries, and log source management.
• Experience with log parsers (DSM Editor) and normalization techniques.
• Familiarity with QRadar Network Insights (QNI) and behavioral analytics modules.
• Knowledge of SIEM integration processes and onboarding new log sources.
• Excellent problem-solving and independent work capability.
• Scripting in Python or Bash for automation is a plus.
• Clear documentation and knowledge transfer skills.
• Security certifications related to QRadar are advantageous.

Responsibilities

• Design and build custom dashboards tailored for SOC operators.
• Develop and optimize correlation rules to enhance threat detection.
• Implement new custom parsers and improve existing ones for log data normalization.
• Tune frequently used queries for performance and relevance.
• Integrate critical systems not previously connected to SIEM for full visibility.
• Adapt QRadar Network Insights mechanisms to enhance network threat detection.
• Reconfigure and fine-tune the behavioral analytics component to evolving security needs.
• Collaborate with SOC analysts, threat hunters, and infrastructure teams for effective QRadar implementation.
• Ensure ongoing documentation and knowledge transfer for all developed functionalities.

Skills

QRadar expertise

SOC experience

AQL queries

Log parsing and normalization

Scripting (Python, Bash)

Documentation & knowledge transfer

Threat detection & correlation

Problem solving

Education

IBM QRadar Certified Specialist

CISSP

CEH

Tools

QRadar DSM Editor

QNI (QRadar Network Insights)

Job description

We are looking for a seasoned Technical Solution Architect specializing in QRadar to support and enhance our Security Operations Center (SOC) capabilities. This role is focused on building efficient dashboards, improving data parsing and correlation, and integrating critical systems into the existing SIEM infrastructure.

Responsibilities:

• Design and build custom dashboards tailored for SOC operators.

• Develop and optimize correlation rules to enhance threat detection.

• Implement new custom parsers and enhance existing ones to improve log data normalization.

• Tune and optimize frequently used queries for performance and relevance.

• Integrate critical systems not previously connected to SIEM for full visibility.

• Adapt mechanisms from QRadar Network Insights (QNI) to enhance network threat detection.

• Reconfigure and fine-tune the behavioral analytics component to align with evolving security needs.

• Collaborate with SOC analysts, threat hunters, and infrastructure teams to ensure effective implementation of QRadar solutions.

• Ensure ongoing documentation and knowledge transfer related to all developed functionalities.

Requirements:

• Proven experience as a QRadar Architect or Engineer, ideally in a large-scale SOC environment.

• Strong expertise in QRadar components: correlation rules, custom dashboards, AQL queries, and log source management.

• Hands-on experience with log parsers (DSM Editor, custom parsing, normalization techniques).

• Experience with QNI (QRadar Network Insights) and behavioral analytics modules.

• Knowledge of SIEM integration processes and best practices for onboarding new log sources.

• Strong problem-solving skills and the ability to work independently and proactively.

• Familiarity with scripting (e.g., Python, Bash) for automation and customization is a plus.

• Effective communication and documentation skills.

• Security certifications (e.g., IBM QRadar Certified Specialist, CEH, CISSP, etc.) are an advantage.