SIEM Security Analyst

• Install and configure IBM Qradar, manage log collection, and monitor real-time events.

• Create dashboards and reports, fine-tune rules, and perform health checks on integrated devices.

• Analyze incidents, improve alert conditions, and troubleshoot Qradar issues.

• Integrate log sources, develop analytics rules, incidents, playbooks, workbooks, and KQL queries for data normalization.

• Perform daily event monitoring, investigate incidents, and provide rapid incident management response.

• Generate weekly/monthly incident analysis reports and advise on outbreak response.

• Configure log collection from various sources, monitor real-time events, and create use cases, dashboards, and reports.

• Fine-tune rules, perform daily event monitoring, and analyze incidents.

• Configure log collection, monitor real-time events, and create dashboards and reports.

• Fine-tune rules, perform daily event monitoring, and analyze incidents.

• Conduct regular health checks and improve alert conditions to reduce false alarms.