We're looking for an experienced QRadar SIEM Engineer to join a leading insurer on an initial 6 month contract.
You'll lead the onboarding, tuning and secure operation of their QRadar log ingestion environment, with a focus on reliable, load-balanced, high-availability log collection.
What you'll be doing:
- Onboarding and migrating log sources into QRadar (firewalls, EDR, cloud, authentication, proxies)
- Building custom DSMs, log source extensions and custom properties
- Designing and managing load balancing across Event Collectors, Event Processors and Data Nodes
- Managing EPS and tuning offenses and rules with the SOC, IR and threat detection teams
- Monitoring log source health and documenting log flows and architecture
What you'll need:
- Strong hands-on QRadar engineering experience (Console, Event/Flow Processors, Event Collectors, HA, DSMs)
- Solid knowledge of log transport and balancing (syslog, TCP/UDP, API collection, DNS round-robin)
- QRadar AQL, rule and building block creation
- Scripting/automation in Python or shell
- Splunk experience is a bonus, not essential
Details:
- Hybrid role, 2-3 days P/W onsite
- Initial 6-Month contract
#J-18808-Ljbffr
Security Engineer employer: INTEC SELECT LIMITED
Join a dynamic technology team in London as a Junior Developer, where you'll have the chance to enhance your skills in a supportive and collaborative environment. With competitive benefits including 25 days of holiday, a pension scheme, and opportunities for long-term career development, this role is perfect for those eager to grow within a global organisation while working with cutting-edge Microsoft technologies. Experience a vibrant work culture that values innovation and teamwork, making it an ideal place for early-career developers to thrive.
