Platform Support Engineer I at CyberProof (A UST Company) (2024-04 – Present)
SIEM Engineer / Administration (QRadar)
SIEM QRadar Administrator at IBM (2021-02 – 2024-03)
SIEM Administration (IBM QRadar)
- SIEM IBM QRadar Installation, Configuration, Integration, Implementation and Administration, High Availability Management.
- Upgradation, patching and licensing of QRadar and its all components.
- Troubleshooting of SIEM Components if anything failed or not working properly.
- Log Sources onboarding (integration) and off boarding (decommission) on SIEM QRadar.
- Troubleshooting of Log Sources which are not reporting to SIEM.
- Scheduling and maintaining regular backups of QRadar configuration and data.
- Manage QRadar data retention.
- Restoring Data and configuration Backup as per requirement.
- Doing Daily health check-up of IBM QRadar SIEM Components.
- Good understanding of Architecture of QRadar SIEM.
- Troubleshooting of QRadar notification like errors and warnings.
- DSM upgradation and installation
- Creating User accounts in QRadar and providing appropriate access as per their roles and responsibility. User Restriction Management.
- Creating Execution plans and Change Orders.
- Discussing tickets on call with the clients in a Weekly/Monthly manner.
- Creating and maintaining environment documentation like inventory management, SOPs.
- Working as per ITIL process – On Change Management, Problem Management, Incident Management, Service Request, SLA, etc.
- Team Management and work as motivator, communicator
- Daily, Weekly, Monthly, Yearly report creations and presentations.
- Help Audit team to complete multiple audits like ISO, PCI-DSS, etc.
SIEM Engineer - L2 at SecurityHQ (Si Cyber - Secintel Consult) (2019-04 – 2021-02)
SIEM Administration (IBM QRadar)
- Reference data management, Routing rule management
- Managing authorized services (Viewing, Adding and Revoking).
- Verify data collection.
- Responsible for connectivity of all the components of QRadar.
- Responsible for log flow from all the components of QRadar.
- Manage SIEM user accounts (create, delete, modify, etc.)
- Assist with designing and documenting work processes within the SOC.
- Good understanding of Architecture of QRadar SIEM.
- Proactive and Reactive management of SIEM components.
- Responsible for requirements gathering related to issue/request directly from the customer.
- Creating and scheduling SIEM reports and Dashboards.
- Configure Investigation for to fetch custom logs as per customer requirements.
- Responsible for providing logs as per customer requirements.
- Discussing tickets on call with the clients on Weekly manner.
- Creation and sharing of technical documents.
- Coordinating between offshore and on shore teams.
- Email and Telephonic communication with Technical Support Team
- Responsible and having good experience for to work with IBM QRadar Support team on all type of issues on call and on remote session with the help of WebEx, GTM, Team Viewer etc.
- Supported approximately 5000 servers for 24x7 in multiple shifts.
- Providing training to new on-board teammates.
- Troubleshooting on alerts like disk space, memory, and CPU utilization.
- Updating service/OS/admin passwords at regular intervals.
- As per project requirement, worked on client side for reputed well know customers in Gulf country Qatar.
Senior Security Engineer at SecurView Systems Pvt. Ltd (2016-11 – 2019-04)
SIEM Administration (LogRhythm/QRadar)
Linux System Administrator at SecurView Systems Pvt. Ltd (2012-11 – 2016-11)
Linux Administration
