QRadar SIEM Engineer / Consultant

Location: UK-wide – remote-first, with travel to client sites as required Working Pattern: Remote with travel to client sites as required Type: Permanent or Contract – both considered Salary: Open to discussion – permanent salary or contract day rate, dependent on experience Clearance: BPSS – UK-based with full right to work in the UK Company: Tektora, supporting an established IT Consultancy Tektora are supporting an established IT Consultancy who are looking to speak with hands-on QRadar SIEM Engineers and Consultants for permanent and contract opportunities delivering IBM QRadar across enterprise and public sector environments. This role would suit someone who works in QRadar day to day rather than alongside it – deploying, tuning and integrating the platform on live client deliveries – and who is looking to develop further across detection engineering, log source integration and SIEM migration work. The Role You Will Be Involved In Deploying, configuring and upgrading IBM QRadar across client environmentsOnboarding and normalising log sources, including building custom DSMs and log source extensionsWriting, tuning and maintaining correlation rules, building blocks and reference setsReducing false positives and improving detection quality against MITRE ATT&CK coverageSizing, health-checking and troubleshooting QRadar deployments, including EPS and flow capacityIntegrating QRadar with wider tooling – SOAR, threat intelligence feeds, ticketing and cloud platformsSupporting migrations to or from QRadar, and QRadar on Cloud where relevantBuilding dashboards, offences and reporting for security operations and compliance audiencesProducing design documentation, run books and handover materialWorking directly with client technical teams and SOC analysts through delivery Key Experience Required UK-based with full right to work in the UK, and able to meet BPSS screeningThree years of continuous employment history with no unexplained gapsDemonstrable hands-on experience with IBM QRadar as a product, not peripheral exposure to itAt least two QRadar deliveries or engagements within the last 12–18 monthsLog source onboarding, DSM development and log source extension experienceCorrelation rule development, use case build and offence tuningSolid grounding in security operations, incident triage and detection engineeringComfortable working client-facing, translating technical work for non-technical stakeholdersLinux administration and networking fundamentals Desirable Experience IBM Certified Deployment Professional or Administrator for QRadar SIEMQRadar on Cloud, QRadar SOAR (Resilient) or QRadar EDR experienceMigration experience between QRadar and other SIEM platforms such as Splunk, Sentinel or ChronicleScripting in Python, Bash or PowerShell for automation and API workExperience in regulated or public sector environmentsExposure to consultancy or managed service delivery models Interested? Tektora are looking to speak with QRadar SIEM Engineers and Consultants who are open to permanent or contract opportunities and keen to develop further across detection engineering, integration and SIEM delivery. Please apply with your CV and we will be in touch to discuss the opportunity in more detail.