3 of 3 ArcSight Jobs in Scotland

protocols, and traffic flow within a network. Advanced knowledge of Windows and Linux operating environments, including commands, file systems, and user authentication mechanisms. Proficiency in using SIEM solutions (e.g., ArcSight, Azure Sentinel) for monitoring and log analysis; exposure to analysis tools such as XDR platforms. Ability to demonstrate proficient use of KQL for log searches and filtering. Familiarity with More ❯

and Change Management. Ability to work with minimal levels of supervision. Threat Hunting & Detection (IOC & IOA Analysis, TTP Profiling, Cyber Kill Chain) SIEM Fine-Tuning & Optimisation (QRadar, Splunk, Sentinel, ArcSight) Incident Response & Forensics (MITRE ATT&CK, DFIR, Log Analysis) Threat Intelligence Analysis Security Analytics & Automation (SOAR, YARA Rules, Sigma Rules) Malware Analysis & Reverse Engineering Network & Endpoint Security Monitoring (EDR More ❯

either Erskine or Farnborough. Security clearance level of DV must be obtained and is an essential requirement for this role. Job Functions: Drive technical and architectural improvement of the ArcSight SIEM managed service and tools used to deliver service to customers. Operational management involving support, incident, and change control. Version management, ensuring appropriate ArcSight version levels to maintain … license management, troubleshooting, and tuning. Maintain documentation of the managed infrastructure. Engage with other DXC technical teams, providing technical assistance where appropriate. Act as a technical escalation point for ArcSight SIEM-specific incidents for both service and technical matters. Design, review, and implement ArcSight architecture and components. Demonstrate troubleshooting skills on ArcSight and its components. Mentoring experience More ❯