Sumit Raikwar Email & Phone Number

Installing ArcSight Connectors●     Integration of new devices with ArcSight such as Windows, Linux, CISCO Firewall, Routers, Switches etc.●     Upgradation of ArcSight Connectors●     Monitoring the customer network using SIEM tool – ArcSight●     Creation of ArcSight content like Query, Report, Dashboards etc.●     Work closely with business units to ensure that they know what and how to feed data into ArcSight and to create network hierarchy, classify Log Sources within the ArcSight SIEM.●     Performing Real-Time Monitoring, Investigation, Analysis, Reporting and Escalations of Security Events from Multiple log sources.●     Maintain keen understanding of evolving internet threats to ensure the security of client networks.●     Escalating the security incidents based on the client's SLA and providing meaningful information related to security incidents by doing in-depth analysis of event payload,●     Providing recommendations regarding security incidents mitigation which in turn makes the customer business safe and secure.●     Contacting the customers directly in case of high priority incidents and helping the customer in the process of mitigating the attacks.●     Determine the scope of security incident and its potential impact to Client network; recommend steps to handle the security incident with all information and supporting evidence of security events.●     Creation of reports.       Experience of Qradar●     Knowledge of Qradar.●     Architecture of Qradar.●     Worked on installation of windows, Linux, Cisco firewall, router, switches etc.●     Create reports when any devices need to be onboard.●     Doing Troubleshooting if any devices are not sending the logs.●     Provide proper solution if in case of any queries related to devices like Device not reporting or sending deferent types logs.●     Schedule a call if in case of new device needs to be onboard and ask them for device types which they want to installed and log types which they want to collect.●     Check all the Necessary things during the servers are not sending the logs.●     Check port connectivity which is allowed or not.●     Scheduled a call with client when any devices are not reporting.●     Validate all the devices provided by client.●     Worked on stored or unknown events and parsed and mapped them according to event id and event category.●     When the all the activities is done. We can close the tickets.

• 

  Rani Durgavati Vishwavidyalaya

  Business/Commerce, General