Position: SIEM (Arcsight) L2 support
Location: Weehawken, New Jersey
Duration: 12+ months Contract
Job Description:
The Arcsight SIEM L2 Support analyst is responsible for deploying, configuring and implementing, the Arcsight SIEM solution to detect IT security incidents. The SIEM Engineer will function as an integral member of security production support team by taking requirements from engineering team and security monitoring team to manage and operate the Arcsight platform.
Position Responsibilities
- Install/upgrade the Arcsight solution components
- Develop the specific content necessary to meet the organization’s security operations goals, to include: the formation of content-specific queries, templates, reports, rules, alerts, dashboards, and workflows
- Integrate data and event feeds with Arcsight solution.
- Implement/setup smart connectors.
- Troubleshoot log source integration issues on servers, active directory,
- Analyze and resolve complex technical issues related to Arcsight platform.
- Perform on-the-job training of the SIEM solutions for team.
Required Experience
- 5-8 years working within the information security field, with emphasis on security operations, incident management, intrusion detection, firewall deployment, and security event analysis
- 3+ years working with SEM technology, with Arcsight specific certification
- In-depth understanding of configuration options and various architectures of Arcsight SIEM.
- Expertise in troubleshooting technical issues in Arcsight SIEM solution.
- Good knowledge on atleast one of Symantec DLP, McAfee VM, McAfee EPO, FireEye, Cisco NIDS and Splunk is required.
- Expertise with logging configuration of network, security devices and servers.
- Excellent understanding of network infrastructure, operating systems and databases.
- Strong communication skills.
- Excellent written and oral English communication skills.
All your information will be kept confidential according to EEO guidelines.