The Role
Supports IBM QRadar SIEM operations by monitoring platform health, validating event ingestion, onboarding and parsing log sources, managing access and backups, assisting with patches and correlation testing, and troubleshooting telemetry issues. The role documents changes, generates operational reports, follows incident and change-management procedures, and collaborates with SOC analysts and senior engineers to maintain reliable, normalized security data.
Summary Generated by Built In
Role Objective
The QRadar Platform Support – Junior Engineer plays a critical role in maintaining the stability, availability, and performance of the IBM QRadar SIEM infrastructure. This role focuses on day-to-day platform operations, log source integration, and first-level troubleshooting, ensuring that SOC operations receive clean, normalized, and continuous telemetry for monitoring and detection.
Roles and Responsibilities
Operational Support
- Monitor and maintain the health of QRadar components (Console, Event Processors, Event Collectors, Flow Processors).
- Perform daily checks for EPS rate, storage utilization, and system performance metrics.
- Execute routine administrative tasks: user account creation, RBAC management, and scheduled backup verification.
- Generate scheduled operational and health reports for internal SOC and platform performance reviews.
- Respond to platform-related alerts, performing initial triage and escalating as needed.
Technical Responsibilities
- Assist in log source onboarding, testing syslog/API connectivity, and validating DSM mapping.
- Support DSM customization and log parsing validation for new or non-standard sources.
- Review parsing errors and collaborate with senior engineers to correct event categorization issues.
- Help with QRadar patch management, upgrade testing, and version validation under supervision.
- Participate in correlation rule testing, dashboard tuning, and offense verification for rule effectiveness.
- Document configuration changes, SOP updates, and recurring issue resolutions.
Process and Collaboration
- Work closely with SOC analysts, platform teams, and incident responders to ensure event integrity.
- Follow change management and incident escalation protocols.
- Maintain compliance with security standards for log retention and access control.
- Participate in internal reviews, root cause analysis sessions, and continuous improvement initiatives.
Mandatory Skills Required
- Foundational understanding of QRadar SIEM architecture (Console, EC, EP, Flow Collector).
- Familiarity with Linux administration, networking fundamentals, and event logging protocols (Syslog, SNMP, WinCollect, API).
- Awareness of SIEM correlation logic, event normalization, and DSM parsing basics.
- Hands-on experience in log analysis, data ingestion validation, and dashboard usage.
- Scripting knowledge (Bash, Python) for automation or health-check reporting.
- Exposure to incident response or SOC operations (preferred).
Educational Requirements
- Bachelor’s degree in Computer Science, Information Technology, or Cybersecurity.
- Postgraduate diploma or coursework in Information Security / Network Security preferred.
Certifications (Mandatory / Preferred)
- IBM QRadar Foundation or Associate Certification (preferred).
- CompTIA Security+ / CEH or equivalent foundational cybersecurity certification
Skills Required
- Foundational understanding of IBM QRadar SIEM architecture, including Console, Event Collectors, Event Processors, and Flow Collectors
- Familiarity with Linux administration and networking fundamentals
- Familiarity with Syslog, SNMP, WinCollect, and API-based event logging protocols
- Awareness of SIEM correlation logic, event normalization, and DSM parsing
- Hands-on experience with log analysis, data ingestion validation, and dashboard usage
- Bash and Python scripting knowledge for automation or health-check reporting
- Bachelor's degree in Computer Science, Information Technology, or Cybersecurity
- CompTIA Security+, CEH, or equivalent foundational cybersecurity certification
- Exposure to incident response or SOC operations
- Postgraduate diploma or coursework in Information Security or Network Security
- IBM QRadar Foundation or Associate Certification
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Infosec is a cybersecurity education company that helps IT and security professionals advance their careers and helps employees become safer online at work and home. Its offerings include Infosec Skills, with more than 1,400 hands-on cybersecurity courses and instructor-led certification boot camps, and Infosec IQ, which provides security-awareness training. Its mission is to equip individuals and organizations to outsmart cybercrime.
