gds consulting_siem - ibm qradar admin senior ConsultantErnst & Young Global Services Philippines Inc

Key Responsibilities: * Act as a IBM QRadar enterprise Subject Matter Expert * Maintain strategic IBM QRadar architectural development roadmap * Responsible for log source deployment and server infrastructure analysis, optimization, and capa Key Responsibilities: Act as a IBM QRadar enterprise Subject Matter Expert Maintain strategic IBM QRadar architectural development roadmap Responsible for log source deployment and server infrastructure analysis, optimization, and capacity planning Consult, design and implementation of a SIEM solution Managing application performance, capacity and availability Design, develop, create and fine tune correlation rules / existing use cases Log source integration and log parsers adjustment Responsible for onboarding and maintaining a wide variety of data sources to include various OS, appliance, and application logs Support IBM on Unix, Linux and Windows-based platforms Perform data analysis using various query and reporting methods Solve/troubleshoot complex integration challenges and configuration issues Create Use cases designed to capture malicious activities, signatures and behaviors. Technical writing/creation of formal documentation such as architecture diagrams, technical designs, and SOPs Essential Business Experience and Technical Skills: Required: 3-5 years of general work experience and two (2) years of experience architecting, configuring, deploying, and customizing IBM QRadar SIEM. Strong understanding of all IBM QRadar architecture components to include deployment server, architecture design, feature and monitoring health console. Strong understanding of configuration files and relationship between GUI configuration and backend configuration file impact Strong understanding of (Advance Query language) AQL as well as the ability to develop automated search and apps using Python or bash shell scripting Demonstrated ability to create complex dashboards, forms, and visualizations Understanding of System Log Files and other structured and non-structured data Understanding of IOC and IOA signatures and behaviors. Knowledge of log formats and ability to aggregate and parse log data for syslog, http logs, DB logs etc. for investigation purposes To qualify for the role, you must have Ability to work in 24x7 shifts Strong command on verbal and written English language. Demonstrate both technical acumen and critical thinking abilities. Strong interpersonal and presentation skills. Extensive hands-on experience in managing SIEM platform Experience in Linux/UNIX OS Administration Network knowledge of routing and switching Certification in any of the SIEM platforms Additional: Certification - CCSA, CEH, CISSP, GCIH, GIAC. Knowledge of RegEx, Bash, AQL, Python query language Experience Service Now ticketing system Azure / AWS / GCP insight from SIEM perspective
Monster

Taguig City, Metro Manila
Permanent
Full-time