Senior Associate

Line of Service

Advisory

Industry/Sector

FS X-Sector

Specialism

Operations

Management Level

Senior Associate

Job Description & Summary

A career in our Cyber Crime and Breach Response practice, within Cybersecurity and Privacy services, will provide you with the opportunity to help our clients protect their business in today’s evolving landscape by applying advanced and strategic approaches to information management. We focus on assisting organisations manage vast amounts of electronic data and navigate the legal and business processes demanded by critical events which includes litigation, regulatory requests and internal investigations.

Our team helps organisations recognise and respond to cyber security breaches. You’ll help the team with forensic analysis of digital evidence, network security, cyber risk assessments and threat reporting.

                                                JD- Q-Radar SME

Essential Duties & Responsibilities

The person would be the part of SIEM Engineering Team who would support all aspects of   Security Information and Event Management initiative.

o Participate in the engineering of QRADAR Security Information and Event Management systems to include QRADAR ESM, Logger appliances, Windows and Linux servers, network devices and backups.

o Configure rules within QRADAR ESM to correlate events from various devices throughout the network and identify anomalies that require further investigation.

o Participate in the design and implementation of QRADAR architecture upgrades and changes. 

o Establish plans to implement architecture changes.

o Life-cycle management of the QRADAR platforms including coordination and planning of upgrades, new deployments, and maintaining current operational data flows.

o Apply Configuration Management disciplines to maintain hardware/software revisions, QRADAR content, security patches, hardening, and documentation.

o Develop content for a complex and growing QRADAR infrastructure. This includes use cases for Dashboards, Active Channels, Reports, Rules, Filters, Trends, and Active Lists.

o Provide optimization of data flow using aggregation, filters, etc.

o Create periodic reports for management showing the health of the SIEM program.

o Working closely with Company team to maintain security requirements for operation of o QRADAR systems.

o Support all aspects of Company's Security Information and Event Management initiative.

o Drive the development and the establishment, enhancement, and continual improvement of an integrated set of correlation rules, alerts, searches, reports, and responses. 

o Responding to day-to-day security requests relating to QRADAR operations.

o Tunes QRADAR performance and event data quality to maximize QRADAR system efficiency.

o Assists with analyst using QRADAR and other tools to detect and respond to IT security incidents.

o Perform routine health checks and preventative maintenance of Q-Radar Systems

o Act as SME for all questions related to the QRADAR SIEM implementation.

o Maintaining up to date documentation of designs/configurations.

o Create shell and perl scripts to facilitate automated tasks.

o Work with other Service Providers to support areas of common interest.

o Working with software and hardware vendors.

o On-call support may be required.

o Perform other duties as assigned. 

Desired Skills and Experience

o Computer Science Engineering or equivalent experience and education 

o A minimum of five years of experience as a security generalist 

o At least 3 to 5 years of experience using QRADAR or three or more years working with another SIEM product 

o Familiarity with the client application Snare 

o Understanding of logging on various operating systems including Windows and *nix 

o A basic understanding of networking principles 

o Strong written and verbal communication skills 

o CISSP or QRADAR or GCIA certification

Education (if blank, degree and/or field of study not specified)

Degrees/Field of Study required:

Degrees/Field of Study preferred:

Certifications (if blank, certifications not specified)

Required Skills

Optional Skills

Desired Languages (If blank, desired languages not specified)

Travel Requirements

Not Specified

Available for Work Visa Sponsorship?

No

Government Clearance Required?

No

Job Posting End Date