Solutions Architect (QRadar and IBM Resilient (SOAR))Location: 55 Farmington Av Hartford, Connecticut 06103 Duration: 6+ MonthsThe initial period of work is anticipated to be from July 2023 through September 2023 with possible 3 month extension.Project/System OverviewProvide technical expertise configuring QRadar and IBM Resilient (SOAR)Scope Of WorkHigh-level description of the need.Short term project for deployment and customization of SOAR environment and QRadar expansion. Requires specific experience: Python scripting, configure IBM SOAR, QRadar configuration and tuning.Specific Deliverables To Be ProvidedMinimally, the following should be included:Deliverables and Services to be provided by each Consultant – Be specific and concrete.Provide the following services as directed:Develop and Deploy custom API integrations for IBM SOARCreate Playbooks and workflows for monitoring, containment, response and recovery to include but not limited to:Phishing ResponseFirewall ruleset integration (Checkpoint)Vulnerability managementQRadar deployment and expansionQRadar custom rule tuningDepartment’s requirements for status reporting.The resource will work directly with senior members of the IT Security Staff taking direction from the IT Security Manager. If circumstances dictate, written reports may be required.Documentation required from the Contractor (e.g.
reports, manuals, analysis, or other documentation as required by the Department).Environmental Diagrams, Standard Operating Procedures (SOP), document queries etc.Applicable technical standards required by the Department, along with Department policies and procedures.NAImplementation schedule for the Deliverables and Services.List Of Required Skills And Experience - Be Specific And ConcreteThe desired consultant should have:Expert-level knowledge of IBM Security products; QRadar SIEM and Resilient SOARNot less than 5 years of IT experiencePython ScriptingAdvanced Query Language (AQL)Working knowledge of TCP/IPLinux experienceWorking knowledge of CheckPoint Firewall and IPSExperience working in complex network environment