Acest anunț a expirat și nu este disponibil pentru aplicare
- Should be smart, self-driven with excellent communication skills to handle US customers
- Hands-on working experience in log sources onboarding with ArcSight ESM & ArcSight Logger, QRadar, Splunk or any other SIEM solution.
- Work experience related to following areas are most preferred- log sources on-boarding in Big Data SIEM environment is preferable.
- Device management of different security products (UTM, Firewall, IPS, WAF, EDR, Cloud Technologies).
- Knowledge on Azure & AWS fundamental resources.
JOB RESPONSIBILITIES
- Log collection and ingestion to our MDR platform from various network devices (like Firewall, Switches, Router, Proxy, IPS, WAF, Etc..), servers, and Cloud resources.
- Log collection via Apache NiFi, Splunk, ArcSight SIEM, McAfee SIEM, Azure Sentinel
- Log analysis for onboarded devices and taking necessary steps to fix if any issues observed.
- Preparing Technical Documents with integration architectural information and pictorial representations.
- Exploring various approaches for log collection, documenting post successful completion and validation.
- VM Creation and deployment on customer environment.
- Basic understanding on Vulnerability Management (Saint Vulnerability Scanner)
- May require travel to client sites as required