SIEM Admin L2 (1371,8603)

Position Details:

• Role: SIEM Admin L2 – QRadar / Sentinel
• Req ID: 8603
• Simplify ID: 1371
• Location: Mumbai
• Experience: 3–6 Years
• Budget: 9–14 LPA (Inclusive of vendor margin)
• Open Positions: 1

Job Description:

We are looking for a SIEM Administrator (L2) with hands-on experience in IBM QRadar or Microsoft Sentinel to support monitoring maintenance and optimization of SIEM platforms.

Roles & Responsibilities:

• Monitor and manage SIEM platform health performance and availability
• Onboard configure and troubleshoot log sources (servers firewalls applications cloud platforms)
• Handle log parsing normalization and ingestion issues
• Manage EPS storage utilization log forwarding and retention policies
• Perform SIEM administration activities including upgrades patching tuning and health checks
• Develop dashboards reports saved searches and basic use cases/correlation rules
• Troubleshoot SIEM components (Event Collectors Event Processors WinCollect connectors APIs)
• Coordinate with infrastructure network and application teams
• Maintain SOPs runbooks and documentation