HP Arcsight Information Security Incident Management

You will be responsible for monitoring and analyzing information security events, such as unauthorized use or access, fraudulent activities, and data leakage. You will initiate information security incident tickets, which involves third-level activities complementary to the first and second level monitoring and support in the service desk that mainly performs automated, predefined, and procedure-driven tasks. Key Responsibilities: - Monitor and analyze security events in central tools like ArcSight and unconnected local systems on a regular basis. - Develop and refine detective controls based on input from Information Security Investigation Coordinators and control the effectiveness of preventive and detective measures. - Develop and report metrics for the overall information security situation, such as the number of targeted attacks or attempts. - Initiate information security incident tickets, trigger escalation processes if required, and perform initial counter-measures. - Support and collaborate with the Information Security Incident Response Team by providing real-time information on current developments and pinpointing the origin and target of attacks. - Plan, perform, and monitor vulnerability scans using tools like Qualys Guard and report the results. Qualifications Required: - Graduate degree in computer sciences or comparable education and knowledge. - At least 5+ years of working experience in ArcSight. - Experience with security monitoring tools and devices, such as IDS/IPS, AV scanners, security gateways, and SIEM solutions (preferably ArcSight). - Capability to cope with high workloads and pressure. - Knowledge of network and infrastructure security. - Good communication skills, self-organization, strong analytical mind, and motivation to cooperate in a multi-cultural and diverse environment. - Certifications preferred: CEH, ECSA, GCIH. If you are interested in this role, kindly send your resume to jobs@augustainfotech.com.,