Information Security SIEM Specialist IBM Qradar Cissp GIAC REST API Ri

INFORMATION SECURITY SIEM SPECIALIST IBM QRADAR CISSP GIAC REST API RISK INFORMATION SECURITY - INSURANCE CORPORATION

This role requires detailed knowledge of the IBM QRadar SIEM product gained from working on previous deployments with large multinational organisations. In addition an extensive background in networking and security will be expected, with a detailed knowledge of security incident detection and resolution.

Essential

- Extensive experience of working with SIEM products specifically IBM QRadar.
- Ability to script and build automation outside of QRadar - the use of right-click integrations and the REST API.
- Knowledge of modern Virus and Trojan infiltration methods and defences, and recognising IOCs from event information.
- Ability to deduce relationships from seemingly unrelated data points to produce defence rules.
- Experience of developing appropriate responses to security events
- The ability to support the platforms and networking teams when integrating new log sources

Beneficial

- Experience working as part of a business support function such as risk, compliance or information security in a large enterprise.
- Experience of working in an analytical role, with an ability to interpret data, prepare reports and undertake business support activities.
- Linux administration skills
- Demonstrable knowledge of security risk management tools, methodologies and practices
- Knowledge of security standards, frameworks, regulation and legislation
- Experience of another key security technology used would be beneficial, eg Check Point, McAfee, Rapid7 Nexpose, RSA Securid, Websense.