IBM Hiring for SIEM & ERD Administrator at Noida, India Full Time

Introduction

As security Specialist a, You will play a role in client facing support for IBM Managed Infra Security Delivery and delivering management services for McAFee Endpoint Protection, MS Dedender, HIPS, Encryption , Vulnerability scan , Web content gateway and Data security management ( Forcepoint DLP) as part of IBM Security Delivery Team.

If you thrive in a dynamic, reciprocal workplace, IBM provides an environment to explore new opportunities every single day. And if you relish the freedom to bring creative, thoughtful solutions to the table, there’s no limit to what you can accomplish here.

Your role and responsibilities

• QRadar SIEM Implementation and Management:

• Deploy, configure, and optimize QRadar SIEM solutions to meet organizational security requirements.

• Integrate log sources, applications, and devices with QRadar to ensure comprehensive coverage.

• Design and implement custom log source parsers, correlation rules, and dashboards to enhance

• threat detection and response.

• Perform system health checks, upgrades, and patch management.

• Manage storage and archiving of logs to meet compliance and retention policies.QRadar SIEM Daily Activities:

• Monitor and analyze security events and alerts generated by QRadar SIEM.

• Investigate and escalate incidents to relevant teams for resolution.

• Fine-tune correlation rules and thresholds to reduce false positives.

• Prepare periodic reports on security posture and event trends.

• Collaborate with IT and security teams to address gaps in event coverage or logging.

• Checkpoint EDR Administration:

• Deploy and manage Checkpoint EDR agents across endpoints.

• Monitor endpoint alerts for potential threats, including malware, ransomware, and unauthorized

• activities.

• Conduct detailed investigations of incidents detected by Checkpoint EDR.

• Ensure EDR policies are up-to-date and aligned with organizational security policies.

• Perform regular audits of endpoint compliance and coverage.

Required technical and professional expertise

• Proven experience in implementing and managing QRadar SIEM.

• Expertise in managing and operating Checkpoint EDR solutions.

• Strong understanding of security incident response and mitigation.- Hands-on experience with log collection, parsing, and analysis.

• Familiarity with compliance frameworks such as GDPR, ISO 27001, and NIST.

Preferred technical and professional experience

• Strong analytical and problem-solving skills.

• Excellent communication and documentation abilities