Role & responsibilities The IBM QRadar SOC Administrator is responsible for the administration, maintenance, optimization, and continuous availability of the QRadar SIEM platform. The role includes log source onboarding, use case implementation, platform health monitoring, troubleshooting, performance tuning, and integration with enterprise security solutions to ensure effective Security Operations Center (SOC) monitoring.

Key Responsibilities
Administer and maintain IBM QRadar SIEM infrastructure.
Monitor platform health, performance, EPS/FPS, storage, and system availability.
Onboard and troubleshoot log sources from security devices, applications, servers, and cloud platforms.
Develop, implement, and fine-tune correlation rules, building blocks, reference sets, and custom properties.
Perform platform upgrades, patches, backups, and disaster recovery activities.
Integrate QRadar with EDR/XDR, SOAR, Threat Intelligence, IAM, ITSM, and other security tools.
Support SOC analysts during investigations by providing log analysis and platform troubleshooting.




Develop dashboards, reports, and compliance metrics.
Prepare and maintain technical documentation, SOPs, and runbooks.

Preferred candidate profile
8+ years of hands-on experience in IBM QRadar administration.
Solid knowledge of QRadar architecture, AQL, CRE rules, DSMs, and log source management.
Experience with Linux administration, networking, and security technologies.
Familiarity with SIEM integrations, scripting (Python/Bash), and REST APIs.
Understanding of SOC operations, MITRE ATT&CK;, Incident Response, and Threat Hunting.

Preferred Certifications
IBM QRadar SIEM Administration
CompTIA Security+
CEH / CySA+ / GCIHY

This role is ideal for professionals experienced in managing enterprise-scale QRadar settings, ensuring high platform availability, effective log management, and continuous improvement of security monitoring capabilities.

📌 Ibm Qradar Soc Administrator Manager Mumbai
🏢 Deloitte Shared Services India
📍 Mumbai