Arcsight Admin- Siem

Wipro; Johannesburg; On-site; ZAR 600 000 - 800 000; Full time

Job summary

A global IT consulting firm is looking for an experienced ArcSight Admin to be based in Johannesburg, South Africa. The role requires a strong background in SIEM ArcSight content development and platform engineering with a minimum of 6 years of experience. Responsibilities include maintaining the ArcSight platform, integrating log sources, and collaborating with threat hunters. Candidates must have ArcSight certification and relevant security certifications like CEH or CISSP. This is a full-time position with a focus on IT services.

Qualifications

• 6+ years in SIEM ArcSight content development & platform engineering.
• Hands-on SOC experience in developing & fine-tuning SIEM custom content.

Responsibilities

• Administer & maintain ArcSight platform.
• Log source integration, data enrichment, asset mapping.
• Fine-tune correlation rules using threat modeling.
• Deploy use cases mapped to MITRE framework.
• Collaborate with Threat Hunters & CSIRT.
• Create SOPs, IoC databases, proactive threat hunting.
• Provide logs for CSIRT & forensic services.

Skills

ArcSight certification

Security certifications (CEH, SANS, OSCP, CISSP)

Knowledge of compliance (PCI, SOX, GDPR)

Job description

ArcSight Admin – SIEM

Wipro – City of Johannesburg, Gauteng, South Africa

Role

SIEM ArcSight SME / Admin (Onsite, Johannesburg)

Experience

• 6+ years in SIEM ArcSight content development & platform engineering
• Hands-on SOC experience in developing & fine-tuning SIEM custom content

Required Skills

• ArcSight certification
• Security certifications (CEH, SANS, OSCP, CISSP)
• Knowledge of compliance (PCI, SOX, GDPR)

Key Responsibilities

• Administer & maintain ArcSight platform
• Log source integration, data enrichment, asset mapping
• Fine-tune correlation rules using threat modeling
• Deploy use cases mapped to MITRE framework
• Collaborate with Threat Hunters & CSIRT
• Create SOPs, IoC databases, proactive threat hunting
• Provide logs for CSIRT & forensic services

Employment Details

• Seniority level : Mid-Senior level
• Employment type : Full-time
• Job function : Information Technology
• Industries : IT Services and IT Consulting