Automation Tester Cypress

August 10, 2026

Greetings from TCS!!!Role: QRadar SOC AnalystExperience: 11 to 15Location: DelhiRole SummaryThe QRadar SOC Analyst is responsible for monitoring, triaging, investigating, and responding to security incidents using IBM QRadar SIEM. This role ensures real‑time threat detection, proactive hunting, correlation rule tuning, and end‑to‑end incident lifecycle management. The analyst collaborates with Threat Intelligence, Network, Cloud, and Endpoint teams to maintain a strong cybersecurity posture. Key Responsibilities1. Monitoring & Offense Management<ul><li>Monitor security events and alerts through QRadar dashboards, consoles, and offense queues.</li><li>Conduct initial and detailed investigation of offenses, determine true/false positives, and escalate as required.</li><li>Perform log enrichment, event correlation analysis, and offense deep‑dive using QRadar tools.</li></ul>2. Investigation & Incident Response<ul><li>Investigate suspicious activities (credential misuse, lateral movement, DNS anomalies, exfiltration, malware behavior).</li><li>Perform root‑cause analysis (RCA) for confirmed incidents.</li><li>Document incident timelines, artifacts, and technical findings in SOC case management tools.</li><li>Coordinate containment, eradication, and recovery steps with relevant teams.</li></ul>3. AQL Search & Log Analysis<ul><li>Use AQL (Ariel Query Language) for advanced searches, pivoting, and correlation.</li><li>Analyze logs from Windows/Linux servers, network devices, EDR, cloud services, and applications.</li><li>Build actionable dashboards and custom queries to support threat‑hunting and investigations.</li></ul>4. Use Case Management & Rule Tuning<ul><li>Review and tune QRadar correlation rules, building blocks, reference sets, and threat models.</li><li>Optimize detection rules to reduce false positives and improve alert fidelity.</li><li>Work with Threat Intelligence team to integrate IOCs, threat feeds, and enrichment sources.</li></ul>5. Threat Hunting<ul><li>Conduct proactive hunts using QRadar events, anomalies, traffic patterns, and baselines.</li><li>Look for MITRE ATT&CK TTPs such as privilege escalation, persistence, lateral movement, and command‑and‑control communication.</li><li>Document hunt hypotheses, results, and recommended improvements.</li></ul>6. QRadar Administration Support (as needed)<ul><li>Validate log source onboarding and troubleshoot ingestion issues.</li><li>Ensure log sources are normalized, parsed correctly, and categorized appropriately.</li><li>Participate in QRadar patching, upgrades, backup/restore tests, and HA validation (if required).</li></ul>7. Reporting & Compliance<ul><li>Generate daily, weekly, and monthly security reports.</li><li>Provide data for compliance audits (ISO 27001, PCI‑DSS, RBI, GDPR, internal governance).</li><li>Maintain all SOC documentation, SOPs, and detection playbooks.</li></ul> Required Skills & ExperienceTechnical Skills<ul><li>Hands‑on experience with IBM QRadar SIEM (offenses, AQL, rules, reference sets, log sources).</li><li>Strong understanding of: </li><li>TCP/IP, DNS, proxy, firewall logs</li><li>Windows/Linux event logs</li><li>Attack vectors and malware behaviors</li><li>MITRE ATT&CK framework</li><li>Cloud logs (Azure/M365, AWS, GCP) is a plus</li><li>Familiarity with EDR/XDR alerts and forensic triage tools.</li></ul> Preferred Certifications<ul><li>IBM QRadar certifications (e.g., QRadar SIEM Analyst)</li><li>Security+ / CEH / CySA+</li><li>Splunk/Elastic experience (bonus)</li><li>ISO 27001 / SOC2 exposure (advantage)</li></ul>