Azalio
IBM QRadar SIEM L3 Engineer / SME
Mumbai·Full Time·On-site·6-10 years
IBM QRadarSIEMSecurity Information and Event ManagementIncident ResponseThreat IntelligenceLog AnalysisNetwork SecurityVulnerability ManagementSecurity Operations CenterCybersecuritySecurity ArchitectureRisk AssessmentSecurity MonitoringForensicsCompliance StandardsScriptingPythonSQLLinuxWindowsCloud SecurityFirewall ManagementIDS/IPSData CorrelationSecurity Incident HandlingSecurity Policy DevelopmentTroubleshootingCommunication SkillsTeam Collaboration
Role Overview
IBM QRadar SIEM L3 Engineer / SME
Location: Mumbai, India
Employment Type: Full Time
Experience Level: 6 - 10 years
Job Description:
- Strong hands-on experience in IBM QRadar SIEM administration, monitoring, troubleshooting, and L3 support.
- Experience supporting UAT and Production SIEM environments across DC and DR.
- Expertise in log source onboarding, DSM configuration, parsing, and troubleshooting.
- Hands-on experience with QRadar Offense Management, Correlation Rules/CRE, AQL queries, Ariel, and Reference Sets.
- Experience in threat detection, event correlation, real-time alert analysis, and incident investigation.
- Knowledge of forensic investigation, attack timeline reconstruction, and identifying compromised systems/accounts.
- Experience with UEBA, Threat Intelligence integration, and SOAR-related activities.
- Experience integrating logs from firewalls, IDS/IPS, servers, endpoints, databases, applications, cloud, and network devices.
- Ability to prepare customized QRadar reports and support compliance/audit requirements.
- Provide L3 technical guidance to L1/L2 SOC teams and support continuous improvement.
- Willingness to work onsite and support emergency/shift-based requirements as per client needs.
How We Work
Ownership-led delivery
We expect every team member to understand the problem, take responsibility and follow through.
Architecture-grounded engineering
Design is validated before implementation begins. Standards and governance are embedded throughout.
Evidence over assumption
Delivery is supported by documentation, runbooks, test results and acceptance evidence.
Continuous improvement
Lessons from every engagement are captured and reused across practices and programs.
Application Process
- 1Submit your application with CV and cover note below
- 2Our team will review your background and reach out within a reasonable timeframe
- 3Initial conversation to understand your experience and explore mutual fit
- 4Technical and role discussion with the practice team
- 5Offer and onboarding