ArcSight SIEM Administrator - iTech US, Inc.

[ad_1] Role- ArcSight SIEM AdministratorLocation- RemoteContract Position ResponsibilitiesSIEM Administration & MaintenanceInstall, configure, and maintain ArcSight components (ESM, Logger, SmartConnectors, Console, ArcMC). Manage ArcSight SmartConnectors: deployment, configuration, upgrades, and health monitoring. Perform system upgrades, patch management, and daily operational checks. Monitoring & Incident HandlingMonitor ArcSight infrastructure availability, performance, and event flow. Troubleshoot connector failures, parsing issues, and event ingestion delays. Collaborate with SOC teams for incident triage and investigation support. Log Management & OnboardingOnboard new log sources into ArcSight including parser tuning and validation. Ensure log integrity, normalization, and enrichment. Maintain log retention policies and compliance requirementsRule, Dashboard, and Report ManagementCreate and optimize correlation rules, filters, queries, and dashboards. Develop and maintain automated reports and alerts for security monitoring. Perform rule tuning to minimize false positives and improve detection accuracy. Performance & OptimizationMonitor system performance and capacity utilization. Fine-tune configurations for scalability and efficiency. Conduct root cause analysis for recurring system or connector issues. Security & ComplianceEnsure ArcSight environment aligns with security best practices and audit requirements. Support compliance use cases (ISO, PCI-DSS, HIPAA, SOC2, etc.). Maintain proper access controls and segregation of duties. Maintain SOPs, architecture diagrams, and operational runbooks. Provide knowledge transfer sessions to SOC analysts and team members Education: At least a bachelor s degree (or equivalent experience) in Computer Science, Software/Electronics Engineering, Information Systems, or a closely related field is required for the projectEmployers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity. [ad_2] Apply to this job