09 Aug 2024
[Hiring] ArcSight Administrator Dubai UAE
Position: ArcSight Administrator
Date posted: 2024-08-09
Industry: other
Employment type: Full Time
Experience: 3 to 5 year
Qualification: Bachelor’s Degree holder
Salary: AED 5000 to 10000
Location: Dubai, United Arab Emirates
Company: Confidential
Description:
Hiring ArcSight Administrator
Location: Dubai, UAE
Job Summary:
We are seeking an experienced ArcSight Administrator to manage and maintain our ArcSight SIEM system and ArcSight Logger. .
Key Responsibilities:
System Administration:
- Install, configure, and maintain ArcSight components including ArcSight Manager, ArcSight Console, ArcSight Smart Connectors, and ArcSight Logger.
- Manage and monitor the health and performance of the ArcSight infrastructure.
- Perform regular system updates, patches, and upgrades.
Event and Log Management:
- Develop and manage log collection and normalization processes using both ArcSight Manager and ArcSight Logger.
- Create and manage correlation rules, filters, and alerts to identify and respond to security threats.
- Utilize ArcSight Logger for advanced log search, analysis, and reporting.
- Analyze and troubleshoot event data to ensure accurate and effective threat detection.
Security Incident Response:
- Monitor security events and alerts generated by ArcSight Manager and Logger.
- Respond to and investigate security incidents, working closely with the security operations team.
- Provide detailed reports and documentation on incidents and resolution.
Performance Optimization:
- Optimize system performance by tuning ArcSight components, including ArcSight Logger and related configurations.
- Manage and optimize storage and data retention policies within ArcSight Logger to ensure efficient operation.
User Management:
- Configure and manage user roles and permissions within ArcSight Manager and Logger.
- Collaborate with IT and security teams to ensure integration of ArcSight Manager and Logger with other security tools and systems.
- Generate and present regular reports on system performance, security incidents, and other relevant metrics using ArcSight Logger.
Documentation and Compliance:
- Maintain up-to-date documentation on system configurations, procedures, and policies for both ArcSight Manager and Logger.
- Ensure compliance with organizational security policies and industry regulations.
Experience:
- Minimum of 5 years of experience in managing ArcSight systems, including both ArcSight Manager and ArcSight Logger.
- Hands-on experience with ArcSight components such as ArcSight Manager, Smart Connectors, ArcSight Console, and ArcSight Logger.
Skills:
- Experience with ArcSight Logger for log collection, storage, and analysis.
- Familiarity with security technologies and protocols such as firewalls, IDS/IPS, and vulnerability management.
- Proficiency in scripting languages (e.g., Python, Bash) for automation and customization.
Certifications:
- Relevant certifications such as ArcSight Certified Administrator, ArcSight Logger Certification, CISSP, or other security-related certifications are preferred.