FortiSOAR Administrator (with IBM QRadar)

About the role

A company based in Abu Dhabi is looking for a FortiSOAR administrator with strong IBM QRadar experience. The role manages and optimizes a customer's SIEM/SOAR environment, security automation, integrations and SOC operations.

Key responsibilities

• Manage and administer FortiSOAR, including playbooks, connectors, integrations, users and configurations.
• Develop and maintain automation workflows for incident response, investigation and threat enrichment.
• Administer IBM QRadar, including log sources, DSMs, offenses, rules, reference sets and AQL queries.
• Troubleshoot log collection, parsing, correlation and integration issues.
• Integrate QRadar with FortiSOAR and other security technologies such as EDR, firewalls, threat intelligence and ITSM platforms.
• Develop and maintain API-based integrations and security automations.
• Support SOC teams with incident-response workflows, troubleshooting and automation requirements.

Required profile

• Hands-on experience with FortiSOAR and IBM QRadar.
• Strong knowledge of SIEM, SOAR, SOC operations and incident response.
• Minimum 3 years of relevant cybersecurity/SOC experience preferred.
• Excellent troubleshooting and communication skills.

Required skills

• REST APIs, JSON and scripting such as Python, PowerShell or Bash.
• QRadar knowledge including DSM, CRE rules, custom properties, offenses and AQL.