SME - IBM Qradar

Job Description Job Location: Mumbai (Andheri) Years of Experience: 7+ Mandatory Skill sets: Log Parsing, API Integration, DAM Guardium, QNI, REST API Integration, SOAR Job Description: We seek an experienced Subject Matter Expert (IBM Qradar SIEM) to support our mission‑critical UAT and Production environments at Mumbai. The ideal candidate will have deep expertise in Log Parsing, API Integration, REST API Integration, SOAR, DAM Guardium, QNI. Location: Mumbai (Andheri) Key Responsibilities: SOC Operations & Monitoring Perform continuous monitoring of SIEM‑DAM platforms across DC & DR.Integrate & manage SIEM, SOAR, XDR, IDS/IPS, UEBA, threat intel platforms.Monitor trading platforms, APIs, gateways for anomalies.Track zero‑days, emerging threats, and APT campaigns. Incident Response Lead L3 incident triage, containment, eradication, and recovery.Conduct root cause analysis with corrective action planning.Coordinate with regulators: SEBI, CERT‑In, RBI.Conduct cyber drills, red/blue team exercises. Technology Optimization Manage & optimize SOC tools, dashboards, and analytics.Drive SOAR automation, ML-based anomaly detection, custom scripts.Ensure compliant log management, retention & forensic readiness.Align SOC with NOC, fraud monitoring & BCP teams. Compliance & Reporting Ensure alignment with SEBI CSCRF, CERT‑In Guidelines, DPDPA, PCI DSS, ISO 27001.Submit regulatory incident reports within mandated timelines.Support internal/external audits with accurate documentation.Create executive dashboards & incident summaries. Threat Intelligence & Hunting Build & maintain a Cyber Threat Intelligence (CTI) function.Conduct proactive threat hunting & analytics‑driven detection.Work with engineering & architecture teams to enhance detection coverage. SOC Governance & Team Enablement Create SOC SOPs, playbooks, processes using NIST, ISO 27001, MITRE ATT&CK.Implement and track SOC Maturity Roadmap.Monitor SOC KPIs such as MTTD, MTTR, containment rates, uptime. Reporting Responsibilities Create & publish custom and predefined QRadar reports.Deliver automated & manual reports for management and regulatory needs.Zero major audit non‑compliances (SEBI / CERT‑In).Reduction in MTTD and MTTR.99%+ SOC availability during cyber incidents.Increased percentage of proactively mitigated threats.Improved SOC maturity and resilience metrics. Required Skills Strong hands‑on experience with IBM QRadar SIEM & DAM.Deep understanding of SOC operations, threat intelligence, and cyber defence.Experience in BFSI or financial‑market cyber environments.Knowledge of compliance standards & regulatory frameworks.Scripting/automation skills (Python / Bash / PowerShell preferred). Job Requirements Mandatory Skill sets: Log Parsing, API Integration, DAM Guardium, QNI, REST API Integration, SOAR