|
Reference Number:
09-01934
Job Description:
Description:
Performs all administration, management, configuration, testing, and integration tasks related to the ArcSight system to include server and backup administration tasks. Develops, implements, and executes standard procedures for the administration, backup, disaster recovery, and operation of the ArcSight systems infrastructure including operating system security hardening, backup management, capacity planning, change management, version/patch management, and lifecycle upgrade management. Interfaces with IT security analysts to adapt ArcSight capabilities to meet operational requirements. Tunes ArcSight performance and event data quality to maximized ArcSight system efficiency. Assists with IDS event correlation using ArcSight, ISS and Open Source Tools to detect and respond to IT security incidents.
Requires minimum of 2 years of direct experience with ArcSight ESM. Requires direct experience with developing ArcSight configurations to meet analyst correlation requirements as well as performing event quality maintenance tasks. Must be able to work in a fast-paced environment as a solution creator using ArcSight capabilities for highly demanding IDS analysts operating in a 24x7 environment. Requires ability to demonstrate in-depth knowledge of TCP-IP protocol implementations for all common network services. Requires demonstrated knowledge of Microsoft and UNIX server management and administration. 2 years hands-on experience installing/engineering Information Technology products.
Direct hands-on experience performing systems hardening to DoD/Govt standards; knowledge of enterprise security architecture best practices and firewall implementation experience desired. Intelligence IT Systems Security experience highly desired.
Bachelors degree or equivalent experience. Certification in OS technology administration desired (MCSE, RHCE, etc). Certification in ArcSight System Administration (ACSA) strongly desired. Certification in ArcSight content development desired. CISSP strongly desired.
*PMP Certification would be a plus*
Please respond to Brad Sematore at bsematore@tcml.com or by phone at 800-617-6172 x4442 and reference job # 09-01934.
Experience Level:
3 Years
Requirements:
|
