Saransh Software Solutions jobs - QRadar Admin

Must have Technology Skills:

• SIEM – Qradar (Preferable QRadar Certified Fundamental Administration)
• CEH/CCNA Security/ CompTIA Security+
• Experience:6 to 12 years working in Security Operations Centre

Skills:

• Ability to interpret disparate sources of data, identify subtle patterns indicative of malicious activity and follow up with research to produce high quality intelligence assessments and reports.
• Correlating log events from multiple technologies using a combination of rules, filters, lists and queries to identify the sequences of events that match potential attack patterns.
• Design and build detection capability to present the SOC analysts with alerts relating to suspicious activity
• Incident response and Forensics experience is an asset
• Should capable to fine tune logs 
• Evaluate event flows to identify common risks and vulnerabilities to develop and implement solutions