Summary
Paramount Computer Systems is seeking a FortiSOAR Administrator in Abu Dhabi to manage and optimize customer SIEM/SOAR environments. The role includes administering FortiSOAR and IBM QRadar, developing incident-response automation, and maintaining integrations with security and ITSM platforms. Candidates should have hands-on experience with both products, knowledge of SOC operations, and experience with APIs, JSON, and scripting. Three or more years of relevant cybersecurity or SOC experience is preferred.
The posting
As published on paramountassure.com. Pulled from the employer's site and shown as they wrote it.
Kindly find JD for the same.
We require Forti SOAR admin with IBM QRadar expertise (Abu Dhabi)
Role Summary
We are seeking a skilled FortiSOAR Administrator with strong IBM QRadar experience to manage and optimize customer's SIEM/SOAR environment, security automation, integrations, and SOC operations.
Key Responsibilities
- Manage and administer FortiSOAR, including playbooks, connectors, integrations, users, and configurations.
- Develop and maintain automation workflows for incident response, investigation, and threat enrichment.
- Administer IBM QRadar, including log sources, DSMs, offenses, rules, reference sets, and AQL queries.
- Troubleshoot log collection, parsing, correlation, and integration issues.
- Integrate QRadar with FortiSOAR and other security technologies such as EDR, firewalls, threat intelligence, and ITSM platforms.
- Develop and maintain API-based integrations and security automations.
- Support SOC teams with incident-response workflows, troubleshooting, and automation requirements.
Required Skills
- Hands-on experience with FortiSOAR and IBM QRadar.
- Strong knowledge of SIEM, SOAR, SOC operations, and incident response.
- Experience with REST APIs, JSON, and scripting such as Python, PowerShell, or Bash.
- Strong QRadar knowledge, including DSM, CRE rules, custom properties, offenses, and AQL.
- Excellent troubleshooting and communication skills.
- Min 3+ years of relevant cybersecurity/SOC experience preferred.