Overview
Experience with IBM QRadar Security Information and Event Management platform. Candidate is expected to have at least 2 years of hands on operational experience.
Responsibilities
- Hands on development of parsers, LSX (Log Source Extensions) and DSMs (Device System Modules) for acquiring log sources is required.
- Experience developing parsers for COTS and custom application logs. Experience developing event correlation with logic based on critical security events.
- Log source integration. Use Case development and implementation. Performance optimization. Reporting and dashboard configuration.
- Experience with Sourcefire Intrusion Prevention or other relevant Intrusion Prevention technology. Experience with Python programming highly desirable, but not required.
- Possess broad understanding of system hardening concepts and techniques
- Network and secure remote access controls
- Virtualization technologies (VMware, VLANs, Hypervisors)