Arcsight Developer
Continental Technology Solutions Inc.
Toronto, CA
6d ago

Job Description :

  • Deploy new ESM, Loggers, SmartConnectors / FlexConnectors as required to collect data feeds
  • Assist in the proper operation and performance of ArcSight ESM, Loggers and connector
  • Provide capability to analyze ArcSight output and interpret reports
  • Integration of data feeds (logs) into ArcSight
  • Log monitoring
  • Perform Content Development to properly identify data feeding ArcSight
  • Develop filters to assist in the identification of significant events
  • Coordinate with client engineering staff for modifications, downtimes, and upgrades
  • Develop reports (manual and automated) to support the development, collection, and reporting of Quality Assurance and -
  • Performance metrics (as defined by the client)

  • Develop dashboards / reports for external customers for system monitoring
  • Provide ad-hoc training to analysts focusing on specific client missions, including generic ArcSight training sessions -
  • and Custom Use Case training sessions

  • Provide recommendations and implement changes to optimize ArcSight products in the customer environment
  • Support the client in fact finding or case supporting tasks as it relates to ArcSight
  • Evaluate relative ArcSight product advancements and provide recommendations to the customer
  • Identifies security risks, threats and vulnerabilities of networks, systems, applications and new technology initiatives
  • Provides technical support in the development, testing and operation of firewalls, intrusion detection systems, and enterprise anti-
  • virus and software deployment tools

  • Conducts complex security architecture analysis to evaluate and mitigate issues
  • Develops implements, enforces and communicates security policies and / or plans for data, software applications, hardware and telecommunications
  • Experience working with IP networking, networking protocols and understanding of security related technologies
  • including encryption, IPsec, PKI, VPNs, firewalls, proxy services, DNS, electronic mail and access-lists

  • Experience working with internet, web, application and network security techniques
  • Experience working with relevant operating system security (Windows, Solaris, Linux, etc.)
  • Experience working with leading firewall, network scanning and intrusion detection products and authentication
  • technologies

  • Experience working with federal regulations related to information security (FISMA, Computer security Act, etc.)
  • Must be familiar with deploying, installing and administering ArcSight ESM in a complex environment
  • Must have experience with Flex Connectors, and content development, some scripting experience
  • vignesh ctsincorp.com

    Apply
    Add to favourites
    Remove from favourites
    Apply
    My Email
    By clicking on "Continue", I give neuvoo consent to process my data and to send me email alerts, as detailed in neuvoo's Privacy Policy . I may withdraw my consent or unsubscribe at any time.
    Continue
    Application form