A leading security solutions provider located in Maryland is seeking an experienced candidate for a role focused on the IBM QRadar Security Information and Event Management platform. The position requires at least 2 years of hands-on operational experience, strong skills in developing log parsers, and experience with intrusion prevention technologies. The ideal candidate will have a broad understanding of system hardening concepts and efficient use of network security protocols to enhance overall security measures.
Qualifications
At least 2 years of operational experience with IBM QRadar.
Broad understanding of system hardening concepts.
Experience with intrusion prevention technologies.
Responsibilities
Develop parsers and DSMs for acquiring log sources.
Implement use cases and optimize performance.
Configure reporting and dashboards.
Skills
Experience with IBM QRadar
Python programming
System hardening concepts
Network security
Virtualization technologies
Job description
Overview
Experience with IBM QRadar Security Information and Event Management platform. Candidate is expected to have at least 2 years of hands on operational experience.
Responsibilities
Hands on development of parsers, LSX (Log Source Extensions) and DSMs (Device System Modules) for acquiring log sources is required.
Experience developing parsers for COTS and custom application logs. Experience developing event correlation with logic based on critical security events.
Log source integration. Use Case development and implementation. Performance optimization. Reporting and dashboard configuration.
Experience with Sourcefire Intrusion Prevention or other relevant Intrusion Prevention technology. Experience with Python programming highly desirable, but not required.
Possess broad understanding of system hardening concepts and techniques