Sign In
 [New User? Sign Up]
Mobile Version


Bengaluru, KA
Job Code:
  • Auto Industry
Applying for this job will take you to an external site
  • Shortlist
  • Email Friend
  • Print

Job Details

ArcSight Administrator to provide expertise in deploying SIEM solution for datacenters and manufacturing plants across the globe.- Involve in design & implementation activities of Security Information and Event Management (SIEM) & Security Operation (SOC) Project, using ArcSight tool and work with the various IT teams at Daimler in rolling out the service in different geographical locations.- Candidate will be responsible for the quality of all the technical capabilities provided by the SIEM solution- Candidate will undertake individual assignments, analyze customer requirements, gather and analyze data, highlight technical risks, identify mitigation strategies, and implement solutions.- Candidate will work with Security Operations Center (SOC) analysts to help them improve the analytical products they produce.Candidate will establish and maintain a close working relationship with the SIEM Service Manager, Security analysts, other teammates, customers and stakeholders, to ensure delivery of SIEM service within prescribed Service Level Agreements (SLAs).Tools/Products Expertise HP ArcSight Certified Professional (preferred) with 7+ years of experience in ESM, Logger and Express variants Good understanding of ArcSight concepts and best practices Previous implementation knowledge using ArcSight ESM 6.5 Understanding of ArcSight CEF, and syslog formats and events in general Strong understanding of Smart Connectors and how it should be deployed in different scenarios Previous experience on other SIEM tools Qradar, Splunk, ELK / LogStash Experience with different types of SIEM event sources like network intrusion detection & prevention systems, firewalls, Understanding of common network threats, vulnerabilities and possible mitigations using SIEM tools Network and Security systems Firewalls, IDS/IPS, Routers, Switches, Web proxies, Content/URL Filtering, Load Balancers, Endpoint Security, Anti-DDoS, VPN, etc. Operating Systems RedHat Linux, Suse Linux, Unix, Windows Database Basic knowledge of DB2, Oracle and MySQL database structures Others Nessus, Wireshark, Sysinternals, VA & PT Tools, OSSIM, VMWareFunctional Knowledge This individual would play a key role in the SIEM tool administration activities and so must be strong in ArcSight ESM skills with end to end understanding of the technology, ability to write correlation content to address complex use cases, developing new usecases, ability to interpret the complexity of technical problems, Security Incident investigations and Network & Security fundamentals.Malware Analysis and Digital Forensics would be an added advantage.Generic Good documentation and communication skills Customer facing experience and ability to gather and translate requirements into solutions Very proactive in nature and take-up new initiatives to improve the SIEM service Provides after-hour and weekend on call support when required Flexible to work independently, also as a team player and motivated to take ownership at various levels.
Degree: MCA/ PGDCA | ME/ M.Tech./ MS (Engg/ Sciences)

Additional Degree: BE/ B.Tech (Engineering) | BCA (Computer Application)

Experience: 7-12


Application Programming | Database Administration (DBA) | Quality Assurance/Testing | Software Engineer
Applying for this job will take you to an external site


© Copyright 2015 Al Nisr Publishing LLC - powered by Gulf News