QRadar SIEM Engineer

Apply for this position Please mention DailyRemote when applying
timePosted 3 days ago location United States salarySalary undisclosed
Before you apply - make sure the job is legit.

Attempting to apply for jobs might take you off this site to a different website not owned by us. Any consequence as a result for attempting to apply for jobs is strictly at your own risk and we assume no liability.

Job Description

only Job Description QRadar Subject Matter Expert Content Rule Developer for QRadar Understanding of different security, network and system log sources, events etc. Understand Use Case Development process and accordingly create rules complying with it Ability to understand requirement, validate log sources and build content use case or rules Test Use Case rules in UAT to reduce the false positive and then migrate to production Fine Tuning of Use Cases Rules to create high fidelity rules Create Rules or Use cases rules basis of Kill Chain Understanding of MITRE Framework and creating rules use cases for different techniques Mapping of existing use cases to Mitre Framework Create Playbook for use cases delivered Accounting of Offenses and then helping to drive reduction in FP to drive efficiency Work with stakeholders to Integrate new log sources or failed ones Ability to write custom parsers or modify existing parsers Ability to create reports Document the Use Cases etc