T&T | Cyber: D&R I Deputy Manager | SIEM - Qradar Engineer| Bengaluru, Hyderabad
Deloitte
Deloitte
Join Deloitte's Cyber team as a Deputy Manager in Bengaluru or Hyderabad, contributing to securing organizations against cyber threats. This role is integral to protecting valuable assets through robust cybersecurity strategies, ensuring resilience, and enabling new opportunities.
As a key member of our Cyber team, you will cultivate positive relationships with colleagues and clients, consistently aiming to exceed expectations. Your expertise will be crucial in managing and maintaining the IBM QRadar Security Information and Event Management (SIEM) platform.
This involves deploying, configuring, and optimizing QRadar for effective security monitoring, event correlation, and threat detection across the organization's infrastructure. You'll collaborate with various IT and security professionals to build and maintain a high-performing security framework. The role emphasizes embedding cyber risk management into strategic development for enhanced information and technology risk management.
Key responsibilities include the deployment and configuration of QRadar components, ensuring seamless integration with diverse network devices, systems, and applications for comprehensive log and event collection. You will establish and uphold best practices for QRadar implementations.
System administration involves closely monitoring the QRadar system's health and performance, including log ingestion, event processing, and storage capacity. Regular maintenance, such as applying patches and upgrades, along with troubleshooting operational issues, is essential. Performance optimization through rule tuning and data retention policy adjustments is also a core function.
Security monitoring and incident response duties include configuring QRadar rules and alerts for effective threat identification, investigating security events, and collaborating on incident analysis. You will regularly review logs and reports to detect potential threats and develop incident response playbooks.
Integration and collaboration with network, system administrators, and the security operations team is vital for successful data source integration and tool interoperability. Providing technical guidance and support on QRadar matters to stakeholders is also expected.
Finally, you will be responsible for creating and maintaining comprehensive technical documentation and conducting training sessions to enhance user knowledge of QRadar's capabilities and best practices.
We seek a QRadar Administrator or similar professional with proven hands-on experience in implementing and managing QRadar SIEM. A strong grasp of network and system security principles, log management, event correlation, and threat detection is required.
Proficiency in QRadar deployment, configuration, and administration, including log source management, rule creation, and report customization, is essential. Familiarity with various network and security technologies like firewalls, IDS/IPS, VPNs, and antivirus solutions is necessary.
While not mandatory, experience with scripting languages such as Python or PowerShell and programming concepts would be advantageous. Candidates should possess a B.E./B.Tech (Tier 1/2) or a Master's degree in Information Security, Computer Science, or a related field. Relevant certifications such as IBM Certified Associate Administrator - QRadar SIEM V7.3.x or higher are desirable.
Deloitte
Information Technology & Services