Job Description:

We are looking for a SIEM Administrator (L2) with hands-on experience in IBM QRadar or Microsoft Sentinel to support monitoring, maintenance, and optimization of SIEM platforms.

Roles & Responsibilities:
- Monitor and manage SIEM platform health, performance, and availability
- Onboard, configure, and troubleshoot log sources including servers, firewalls, applications, and cloud platforms
- Handle log parsing, normalization, and ingestion issues across various sources
- Manage EPS, storage utilization, log forwarding, and retention policies
- Perform SIEM administration activities including upgrades, patching, tuning, and regular health checks
- Develop dashboards, reports, saved searches, and basic use cases/correlation rules
- Troubleshoot components such as Event Collectors (EC), Event Processors (EP), WinCollect,



connectors, and API integrations
- Coordinate with infrastructure, network, and application teams for issue resolution
- Maintain SOPs, operational runbooks, and documentation

Required Skills:
- Hands-on experience in IBM QRadar or Microsoft Sentinel administration
- Strong understanding of SIEM architecture, log flow, and event correlation
- Knowledge of Syslog, Windows/Linux logs, TCP/IP networking, and security devices
- Experience with AQL (QRadar) or KQL (Sentinel) queries
- Basic scripting knowledge (Python / PowerShell preferred)
- Positive troubleshooting and analytical skills

📌 Siem_ (Mumbai)
🏢 Arminus
📍 Mumbai