{"id":1269765,"url":"https://alion.io/job/sisa-qradar-platform-support","title":"Qradar Platform Support","company":{"id":2144267,"name":"SISA","domain":"sisa.ai","url":"https://alion.io/company/sisa-ai","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Keka","truth_index":{"grade":"B","score":75,"open_postings":8,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-09-28T05:45:00Z"}},"role":"Support","role_family":"Support","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bash","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Linux","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-06-24T05:06:35Z","employer_posted_date":"2026-06-24","last_verified_at":"2026-09-28T12:35:34Z","board_verified":true,"closed_at":null,"days_open":96,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":95},"description":"Role Objective\nThe QRadar Platform Support - Junior Engineer plays a critical role in maintaining the stability, availability, and performance of the IBM QRadar SIEM infrastructure. This role focuses on day-to-day platform operations, log source integration, and first-level troubleshooting, ensuring that SOC operations receive clean, normalized, and continuous telemetry for monitoring and detection.\nRoles and Responsibilities\nOperational Support\nMonitor and maintain the health of QRadar components (Console, Event Processors, Event Collectors, Flow Processors).\nPerform daily checks for EPS rate, storage utilization, and system performance metrics.\nExecute routine administrative tasks: user account creation, RBAC management, and scheduled backup verification.\nGenerate scheduled operational and health reports for internal SOC and platform performance reviews.\nRespond to platform-related alerts, performing initial triage and escalating as needed.\n\nTechnical Responsibilities\nAssist in log source onboarding, testing syslog/API connectivity, and validating DSM mapping.\nSupport DSM customization and log parsing validation for new or non-standard sources.\nReview parsing errors and collaborate with senior engineers to correct event categorization issues.\nHelp with QRadar patch management, upgrade testing, and version validation under supervision.\nParticipate in correlation rule testing, dashboard tuning, and offense verification for rule effectiveness.\nDocument configuration changes, SOP updates, and recurring issue resolutions.\n\nProcess and Collaboration\nWork closely with SOC analysts, platform teams, and incident responders to ensure event integrity.\nFollow change management and incident escalation protocols.\nMaintain compliance with security standards for log retention and access control.\nParticipate in internal reviews, root cause analysis sessions, and continuous improvement initiatives.\n\nMandatory Skills Required\nFoundational understanding of QRadar SIEM architecture (Console, EC, EP, Flow Collector).\nFamiliarity with Linux administration, networking fundamentals, and event logging protocols (Syslog, SNMP, WinCollect, API).\nAwareness of SIEM correlation logic, event normalization, and DSM parsing basics.\nHands-on experience in log analysis, data ingestion validation, and dashboard usage.\nScripting knowledge (Bash, Python) for automation or health-check reporting.\nExposure to incident response or SOC operations (preferred).\n\nEducational Requirements\nBachelor’s degree in Computer Science, Information Technology, or Cybersecurity.\nPostgraduate diploma or coursework in Information Security / Network Security preferred.\n\nCertifications (Mandatory / Preferred)\nIBM QRadar Foundation or Associate Certification (preferred).\nCompTIA Security+ / CEH or equivalent foundational cybersecurity certification.","description_format":"text","description_chars":2840,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-09-25T23:37:36Z"}],"liveness":{"score":8,"band":"cold","label":"Long shot","p_open":1,"p_active":0.288,"p_room":0.28,"age_days":96,"expected_fill_days":40,"reasons":["conf:8","velocity","win:tail","crowd:"],"computed_at":"2026-09-28T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/sisa-qradar-platform-support","json_url":"https://alion.io/job/sisa-qradar-platform-support.json","meta":{"generated_at":"2026-09-29T00:48:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":763,"day_limit":5000,"remaining_today":4237,"minute_limit":60,"resets_at":"2026-09-30T00:00:00Z"}}}