• Having 3.1 years of experience in the field of cyber security. Have experience in configuring SIEM tools to collect logs from various network devices. Creation/ modification/ fine tuning of Arcsight resources such user administration, Dash boards, Active lists, filters and reports (queries and trends).• Review and analysis of Daily, weekly and monthly reports. Investigate on anomalies reported, eliminate false positives and provide a detailed view to the client with the impact and… Show more • Having 3.1 years of experience in the field of cyber security. Have experience in configuring SIEM tools to collect logs from various network devices. Creation/ modification/ fine tuning of Arcsight resources such user administration, Dash boards, Active lists, filters and reports (queries and trends).• Review and analysis of Daily, weekly and monthly reports. Investigate on anomalies reported, eliminate false positives and provide a detailed view to the client with the impact and recommended actions.• Responsible for Daily health checkup of Arcsight components for better performance.• Onboarding of new devices with Arcsight SIEM solution.• Upgrading every component of Arcsight, patching vulnerabilities, updating licenses, creating and installing certificates in every components of Arcsight setting fail over and dual destination for connectors.• Administration of Arcsight connectors such as installation and configuration creation/ modification/fine-tuning of Arcsight resources such a user administration, dash boards active lists, filters, reports (queries, trends).• Automating the notifications rule creation and report automation fine tuning of use cases.• Investigating and handling of false/true positive security incidents.• Handling incident and change management using ITIL process.• Providing technical comments and advice for any attack related issues raised by L1, L2 team. Show less