Blue Team Analyst – SOC, SIEM Infrastructure

Role Overview

• Ensure the availability, performance, scalability, and integration of the SIEM with various log sources and security solutions.
• Administer and maintain IBM QRadar environments.
• Perform installation, configuration, and updates of SIEM components.
• Manage EPS, storage, log retention, and overall platform performance.
• Monitor the health, availability, and capacity of the environment.
• Implement and integrate new log sources.
• Perform technical troubleshooting of log ingestion and parsing.
• Support the SOC team in resolving platform-related issues.
• Plan and execute architecture and scalability improvements.
• Document architecture, integrations, and technical procedures.
• Ensure adherence to security best practices and governance.

Requirements

• Hands-on experience administering IBM QRadar.
• Knowledge of SIEM architecture and components.
• Experience with platform installation, upgrades, and maintenance.
• Familiarity with operating systems (Linux).
• Knowledge of networking and protocols.
• Experience integrating multiple log sources.
• Strong technical troubleshooting skills.
• Experience with medium to large enterprise environments.
• Experience with performance tuning and EPS optimization.
• Knowledge of high-availability and distributed architecture.
• Experience with automation and scripting (Shell, Python).
• Experience with virtualization and cloud environments.
• Experience with other SIEM platforms.
• Certifications related to QRadar or Information Security.

Tech Stack

• Linux
• Python

Benefits

• Structured career plan (semi-annual and/or annual reviews)
• Support for technical courses and certifications
• 100% online medical assistance (telemedicine, specialists, nutrition, and psychology)
• Life insurance
• Accounting support for MEI (micro-entrepreneur/self-employed contractor)
• Birthday day off