Arc-Sight Engineer
ZINAD IT -
Heliopolis, CairoPosted 5 years ago5Applicants for1 open position
- 1Viewed
- 0In Consideration
- 0Not Selected
Job Details
Experience Needed:
Career Level:
Education Level:
Salary:
Job Categories:
Skills And Tools:
Job Description
- Must possess strong written and verbal communication Skills and must be capable of the understanding, documenting, and communicating technical issues in a non-technical manner.
- Must have experience building and implementing event correlation rules, logic, and content in the security information and event management (SIEM) system with specific experience in the ArcSight ESM environment. Installing and configuring the tools (including ArcSight ESM, Connectors, etc.)
- Must possess past experience building and implementing insider threat monitoring rules.
- Must possess experience in building and implementing event correlation rules, logic, and content in the NitroView SEIM product. Configuring the tools to work with Syslog, File and Database collection of events.
- Must possess experience in tuning SIEM events correlation rules and logic to filter out security events associated with known and well-established network behavior, known false positives and/or known errors.
- Must possess experience in creating scheduled and ad-hoc reporting with SEIM tools
- Must possess detailed knowledge of SEIM technologies and event collector deployments in the Windows and Linux.
