QRadar SIEM Engineer / Consultant
Location: UK-wide – remote-first, with travel to client sites as required
Working Pattern: Remote with travel to client sites as required
Type: Permanent or Contract – both considered
Salary: Open to discussion – permanent salary or contract day rate, dependent on experience
Clearance: BPSS – UK-based with full right to work in the UK
Company: Tektora, supporting an established IT Consultancy
Tektora are supporting an established IT Consultancy who are looking to speak with hands-on QRadar SIEM Engineers and Consultants for permanent and contract opportunities delivering IBM QRadar across enterprise and public sector environments.
This role would suit someone who works in QRadar day to day rather than alongside it – deploying, tuning and integrating the platform on live client deliveries – and who is looking to develop further across detection engineering, log source integration and SIEM migration work.
The Role
You will be involved in:
- Deploying, configuring and upgrading IBM QRadar across client environments
- Onboarding and normalising log sources, including building custom DSMs and log source extensions
- Writing, tuning and maintaining correlation rules, building blocks and reference sets
- Reducing false positives and improving detection quality against MITRE ATT&CK coverage
- Sizing, health-checking and troubleshooting QRadar deployments, including EPS and flow capacity
- Integrating QRadar with wider tooling – SOAR, threat intelligence feeds, ticketing and cloud platforms
- Supporting migrations to or from QRadar, and QRadar on Cloud where relevant
- Building dashboards, offences and reporting for security operations and compliance audiences
- Producing design documentation, run books and handover material
- Working directly with client technical teams and SOC analysts through delivery
Key Experience Required
- UK-based with full right to work in the UK, and able to meet BPSS screening
- Three years of continuous employment history with no unexplained gaps
- Demonstrable hands-on experience with IBM QRadar as a product, not peripheral exposure to it
- At least two QRadar deliveries or engagements within the last 12–18 months
- Log source onboarding, DSM development and log source extension experience
- Correlation rule development, use case build and offence tuning
- Solid grounding in security operations, incident triage and detection engineering
- Comfortable working client-facing, translating technical work for non-technical stakeholders
- Linux administration and networking fundamentals
Desirable Experience
- IBM Certified Deployment Professional or Administrator for QRadar SIEM
- QRadar on Cloud, QRadar SOAR (Resilient) or QRadar EDR experience
- Migration experience between QRadar and other SIEM platforms such as Splunk, Sentinel or Chronicle
- Scripting in Python, Bash or PowerShell for automation and API work
- Experience in regulated or public sector environments
- Exposure to consultancy or managed service delivery models
Interested?
Tektora are looking to speak with QRadar SIEM Engineers and Consultants who are open to permanent or contract opportunities and keen to develop further across detection engineering, integration and SIEM delivery.
Please apply with your CV and we will be in touch to discuss the opportunity in more detail.
