Senior QRadar Platform Engineer
New Era Technology3 hours ago
Responsibilities
- Own the overall health, stability, performance, scalability, and operational success of the IBM QRadar platform.
- Onboard and troubleshoot log sources, including parsing, DSMs, custom properties, log source extensions, event normalization, and protocol configurations.
- Analyze and tune indexes, event and flow pipelines, EPS/FPM capacity, searches, reports, dashboards, and the Ariel database.
- Manage QRadar architecture, infrastructure capacity, storage, high availability, disaster recovery, retention, patching, upgrades, licensing, certificates, backups, access controls, and hardening.
- Develop platform standards, operational procedures, runbooks, health checks, governance practices, and a strategic QRadar roadmap.
- Lead integrations and collaborate with Security Operations, Infrastructure, Networking, Identity, Cloud, Application, and Compliance teams.
- Serve as the highest escalation point for complex QRadar issues and mentor, train, delegate to, and develop the SIEM team.
Requirements
- At least 7 years of IT security experience and 5 years of QRadar experience.
- Expert hands-on experience designing, implementing, administering, optimizing, and architecting enterprise-scale IBM QRadar deployments.
- Deep knowledge of distributed QRadar architecture, including Consoles, Event and Flow Collectors and Processors, Data Nodes, App Hosts, High Availability, and Disaster Recovery.
- Advanced experience with log-source onboarding, ingestion troubleshooting, DSMs, Universal DSMs, custom extensions, custom properties, parsing, normalization, and diverse enterprise integrations.
- Advanced experience diagnosing EPS bottlenecks, Ariel database issues, indexing inefficiencies, event-pipeline constraints, search latency, application performance, and infrastructure issues.
- Expert knowledge of AQL, dashboards, saved searches, reports, detection metrics, compliance reporting, and custom analytics.
- Strong understanding of log management, network protocols, operating systems, authentication platforms, cloud services, security controls, and common attack methodologies.
- Proven technical leadership, mentoring, workload delegation, peer review, escalation management, documentation, knowledge transfer, and stakeholder communication.
- English proficiency and proficiency with Microsoft Office, including Word, Excel, and PowerPoint.
- IBM Certified Associate or Deployment Professional for QRadar SIEM is preferred, along with QRadar apps and App Framework experience, rule/offense tuning, QRadar migrations, consulting or staff-augmentation experience, and handoff documentation skills.
Benefits
- Three-month staff augmentation engagement anticipated to renew month to month, starting as soon as possible.
- 40 hours per week with no travel required.
- Competitive benefits, continuous training, professional development, and access to industry-certified experts are offered by New Era Technology.
About New Era Technology
New Era Technology is the AI, application, and infrastructure partner that simplifies, secures, and scales technology across modern work environments. New Era Technology simplifies, secures, and scales modern technology environments, with offices in the Americas, EMEA, and APAC. New Era provides solutions and services to diverse industries including Global Enterprise, Banking & Finance, Smart Buildings & IoT, Healthcare, Education, and Government. Solutions and Services: • Collaboration & Unified Communications • Data Networking • Digital Transformation • SecureBlu Security Services • CloudBlu Cloud Services • Physical Security & Life Safety • Managed Services • Professional Services