Qradar Platform Support

Role Objective

The QRadar Platform Support – Junior Engineer plays a critical role in maintaining the stability, availability, and performance of the IBM QRadar SIEM infrastructure. This role focuses on day-to-day platform operations, log source integration, and first-level troubleshooting, ensuring that SOC operations receive clean, normalized, and continuous telemetry for monitoring and detection.

Roles and Responsibilities

Operational Support

• •Monitor and maintain the health of QRadar components (Console, Event Processors, Event Collectors, Flow Processors).
• •Perform daily checks for EPS rate, storage utilization, and system performance metrics.
• •Execute routine administrative tasks: user account creation, RBAC management, and scheduled backup verification.
• •Generate scheduled operational and health reports for internal SOC and platform performance reviews.
• •Respond to platform-related alerts, performing initial triage and escalating as needed.

Technical Responsibilities

• •Assist in log source onboarding, testing syslog/API connectivity, and validating DSM mapping.
• •Support DSM customization and log parsing validation for new or non-standard sources.
• •Review parsing errors and collaborate with senior engineers to correct event categorization issues.
• •Help with QRadar patch management, upgrade testing, and version validation under supervision.
• •Participate in correlation rule testing, dashboard tuning, and offense verification for rule effectiveness.
• •Document configuration changes, SOP updates, and recurring issue resolutions.

Process and Collaboration

• •Work closely with SOC analysts, platform teams, and incident responders to ensure event integrity.
• •Follow change management and incident escalation protocols.
• •Maintain compliance with security standards for log retention and access control.
• •Participate in internal reviews, root cause analysis sessions, and continuous improvement initiatives.

Mandatory Skills Required

• •Foundational understanding of QRadar SIEM architecture (Console, EC, EP, Flow Collector).
• •Familiarity with Linux administration, networking fundamentals, and event logging protocols (Syslog, SNMP, WinCollect, API).
• •Awareness of SIEM correlation logic, event normalization, and DSM parsing basics.
• •Hands-on experience in log analysis, data ingestion validation, and dashboard usage.
• •Scripting knowledge (Bash, Python) for automation or health-check reporting.
• •Exposure to incident response or SOC operations (preferred).

Educational Requirements

• •Bachelor’s degree in Computer Science, Information Technology, or Cybersecurity.
• •Postgraduate diploma or coursework in Information Security / Network Security preferred.

Certifications (Mandatory / Preferred)

• •IBM QRadar Foundation or Associate Certification (preferred).
• •CompTIA Security+ / CEH or equivalent foundational cybersecurity certification.