IBM QRadar Deployment & Onboarding
Publicada el 2026-07-21
Descripción de la oferta
I am rolling out IBM QRadar across a hybrid environment and need an experienced SIEM engineer to own the full implementation with security monitoring as the overriding objective. The scope covers on-prem data centers and our public cloud footprint, so you’ll be aligning collectors, log sources, and network connectivity on both sides to feed the console seamlessly. Key deliverables • Production-ready QRadar installation (latest stable version) sized for our current event volume • End-to-end onboarding of network devices, servers, and application logs, including parsing, custom DSM tweaks, and EPS tuning • Use-case development for core monitoring scenarios, correlation rule fine-tuning, and baseline alerts • Validation testing that proves events from each source are parsed, normalized, and searchable in real time • Admin and analyst runbook with deployment diagrams, retention settings, and step-by-step triage guidance • Knowledge-transfer session for my security team, recorded and handed over Acceptance criteria 1. All network, server, and application logs appear in QRadar with the correct categorization. 2. Health metrics show no dropped events over a 24-hour stress test. 3. At least five actionable correlation rules fire during simulated incidents. 4. Documentation is complete and reviewed by us before sign-off. If you have recent success stories standing up QRadar in mixed cloud/on-prem environments and can start soon, let’s discuss timelines and any prerequisites you’ll need.
Skills
Fuente original: freelancer