MDR Resident Engineer

Responsibilities

• Administer and maintain SIEM platforms such as IBM QRadar or Splunk
• Onboard and normalize logs from security devices, servers, applications, cloud platforms, firewalls, and databases
• Monitor SIEM/SOAR health, EPS/FPS, storage utilization, and license consumption
• Perform SIEM upgrades, patching, backup, and restoration activities
• Troubleshoot log collection issues involving network connectivity, certificates, agents, syslog, and parsers
• Coordinate with network, system, and application teams to restore log flow within defined SLAs
• Maintain documentation for log sources, baselines, use cases, and SOPs
• Integrate SIEM with SOAR, ticketing systems, and threat intelligence feeds

Requirements

• 3+ years of hands-on experience in managing, maintaining, and optimizing SIEM platforms
• Hands-on experience with IBM QRadar, Splunk Enterprise Security, or similar SIEM tools
• Strong understanding of network security including Firewalls, IDS/IPS, and VPN
• Proficiency with Windows and Linux logs
• Ability to work in a 24x7 SOC environment

Preferred Qualifications

• Knowledge of Syslog, REST APIs, and HTTPS
• Experience with Regex, log parsing, and filtering
• Basic scripting skills in Python, Bash, or PowerShell
• QRadar Admin or Splunk Admin certifications
• CEH or Security+ certifications