Technical Lead - QRadar

Key skill: CrowdStrike SIEM Implementation

Required Skills & Qualifications

Technical Skills

• Hands-on experience with:
  • CrowdStrike Falcon / LogScale / Next-Gen SIEM
  • SIEM platforms (any of: Splunk, QRadar, Sentinel is added advantage)
• Strong knowledge of:
  • Log formats (Syslog, JSON, CEF, LEEF)
  • Parsing techniques (Regex, Grok, field extraction)
• Experience in:
  • API integrations & scripting (Python / PowerShell preferred)
  • Cloud environments (AWS, Azure)

• Strong understanding of:
  • SOC operations & incident response lifecycle
  • MITRE ATT&CK framework
  • Threat detection methodologies

• Strong analytical and troubleshooting skills
• Ability to work in high-pressure SOC environments
• Good communication and stakeholder management

• CrowdStrike Certifications (Falcon / LogScale)
• Splunk / QRadar / Microsoft Sentinel certifications
• CEH, CISSP, GCIA, or equivalent

• Successful onboarding of log sources with proper parsing
• High-fidelity detection use cases
• Reduced false positives and improved alert quality
• Stable and optimized SIEM platform