5-10 years of industry experience with Security Incident Management/ArcSight Administrations
Design & implementation for a complex ArcSight infrastructure, includes use cases for Dashboards, Active Channels, Flex Connectors, Reports, Rules, Filters, Trends, and Active Lists
In depth understanding of security incident management monitoring & analysis program requirements for an large organization.
Interfaces with IT security analysts to adapt ArcSight capabilities to meet operational requirements.
Strong experience all administration, management, configuration, testing, and integration tasks related to the ArcSight system to include server and backup administration tasks.
Life-cycle management of the ArcSight platforms to including coordination and planning of upgrades, new deployments, and maintaining current operational data flows.
Security certifications - CISSP, CISA, ArcSight (ACSA), GIAC, Others
Additional required Skills:
Candidate must have strong analytic skills for problem analysis and resolution.
Candidate must have excellent oral and written communication skills.
Candidate must have self and project management skills to maintain timely deliverables.
ROLES / RESPONSIBILITIES:
Along with performing Security Incident Management , candidate should be able to define evolving process and procedure requirements, documentation, reporting, remediation proposals. Must be able to exhibit strong communication, collaboration, as well as time and project management skills.
PRACTICE SPECIFIC :
* Instill customer confidence by working with prospects at both a technical and business level
* Should be able to identify security concerns & improvements for a large enterprise.
* Generate innovative approaches and solutions to recurring tasks or problems.
* Contribute to practice development by creating reusable components and sharing key project-learnings within the practice