Data Analytics Engineer

SIEM Engineer (QRadar) | Contract | £600 - £750 per day | Inside IR35

We’re looking for an experienced QRadar SIEM Engineer to join a leading insurer on an initial 6 month contract.

You’ll lead the onboarding, tuning and secure operation of their QRadar log ingestion environment, with a focus on reliable, load-balanced, high-availability log collection.

What you’ll be doing:

Onboarding and migrating log sources into QRadar (firewalls, EDR, cloud, authentication, proxies)
Building custom DSMs, log source extensions and custom properties
Designing and managing load balancing across Event Collectors, Event Processors and Data Nodes
Managing EPS and tuning offenses and rules with the SOC, IR and threat detection teams
Monitoring log source health and documenting log flows and architecture
What you’ll need:

Strong hands-on QRadar engineering experience (Console, Event/Flow Processors, Event Collectors, HA, DSMs)
Solid knowledge of log transport and balancing (syslog, TCP/UDP, API collection, DNS round-robin)
QRadar AQL, rule and building block creation
Scripting/automation in Python or shell
Splunk experience is a bonus, not essential
IBM QRadar certifications are desirable
Details:

£600 - £750 P/D (Inside IR 35)
Hybrid role, 2-3 days P/W onsite
Initial 6-Month contract
To apply, message me directly or send your CV to (url removed)