Arcsight - SIEM Specialist

Join Solutions; Riyad Al Khabra; On-site; SAR 200,000 - 300,000; Full time

Job summary

A leading technology consulting firm is seeking an Arcsight – SIEM Specialist based in Riyadh, Saudi Arabia. The ideal candidate must be a Saudi National, hold a Bachelor's degree in Computer Science, and have experience with Splunk and SIEM appliances. Responsibilities include collaborating with incident response teams, providing input to security architecture, and educating users on security technologies. This role offers an opportunity for professionals who are juniors or have been out of work for more than three months.

Qualifications

• Bachelor's degree of computer science or related field is a must.
• Must be Saudi National.
• Must be junior or out of work for more than three months.
• Must be based in Riyadh, Saudi Arabia.
• Experience with architecting, implementing, and operating Splunk or other big data platforms.
• Experience with IDS, IPS, and SIEM appliance architecture, operations, and management.
• Experience with working in a globally distributed enterprise environment.
• Knowledge of TCP/IP protocols.
• Experience using regex with a scripting language is acceptable.

Responsibilities

• Work with the Cyber Security Incident Response and Threat Intelligence teams.
• Assist with expert searches in Splunk.
• Provide input to SIEM security architecture and governance.
• Validate the effectiveness of SIEM content service.
• Educate users on security technologies.
• Promote standard configuration and change management processes.

Skills

Expertise in Splunk Search Language

Communication skills

Problem-solving ability

Troubleshooting skills

Technical learning aptitude

Education

Bachelor's degree in Computer Science or related field

Certified Information Systems Security Professional (CISSP)

Tools

Splunk

IDS/IPS

SIEM appliances

Linux

UNIX

Microsoft operating systems

Job description

About the job Arcsight - SIEM Specialist

We are looking for ( Arcsight – SIEM Specialist) ( Saudi National) to be responsible for Workingwith the Cyber security Incident Response Team and Threat Intelligence Team toidentify content improvements.

Responsibilities:

• Workingwith the Cyber security Incident Response Team and Threat Intelligence Team toidentify content improvements.
• Assistingthe Cyber security Incident Response Team and Threat Intelligence Team withsearches by acting an expert in Splunk Search Language.
• Providesinput to the overall SIEM security architecture, governance model.
• Providetechnical oversight, standardization and validation of the effectiveness ofSIEM content service.
• Participatein efforts to research, design and implement components in the SIEM contentdevelopment space there are standards-based, high-performing, highly availableand secure.
• Educatedinternal and external users of security technologies to continually improve theknowledge and skill-base of the organization on how best to operate and supportthe technology and security services.
• Supports,implements and promotes standard configuration and change management, processesand practices.

Qualifications:

• Bachelor degree of computer science or related field is amust.
• Must be Saudi National.
• Must be junior or out of work for more than three months.
• Must be based in Riyadh Saudi Arabia.
• Experience with architecting, implementing, and operatingSplunk or other big data platforms.
• Experience with IDS, IPS, and SIEM appliance architecture,operations, and management
• Experience with working in a globally distributedenterprise environment
• Experience with monitoring use case implementationmethodologies
• Knowledge of Linux, UNIX and Microsoft operating systems
• Knowledge of TCP/IP protocols
• Experience using regex (regular expressions) with ascripting language (nix shells, python, C++, ruby, etc.) is acceptable
• Communication skills and problem-solving ability.
• Troubleshooting skills and strong technical learningaptitude.
• Certified Information Systems Security Professional (CISSP)