Job Summary:

We are looking for an experienced OpenText ArcSight SIEM / SOAR / UBA L2-L3 Engineer to manage and support security platforms in SOC/MSSP environment. The role involves day-to-day administration, troubleshooting, configuration and optimization of ArcSight platforms.

Key Responsibilities

- Administer and monitor OpenText ArcSight ESM/SIEM, SmartConnectors, SOAR and UBA/ArcSight Intelligence.
- Manage SIEM rules, filters, Active Lists, dashboards, reports and correlation use cases.
- Monitor EPS, event flow, connector health, system performance and log ingestion.
- Troubleshoot event collection, parsing, correlation and integration issues.
- Configure and troubleshoot ArcSight SmartConnectors and log sources.
- Manage and troubleshoot SOAR playbooks, integrations and automated workflows.
- Support UBA/Intelligence data ingestion, analytics and integration with SIEM.
- Perform L2/L3 troubleshooting, RCA and resolution of platform-related incidents.
- Support upgrades, patches, configuration changes and platform optimization.
- Coordinate with SOC, infrastructure, customer and OEM/OpenText support teams.
- Maintain technical documentation, incident records and RCA reports.





Required Skills

- 3–6 years of hands-on experience with OpenText ArcSight SIEM/ESM.
- Strong experience in ArcSight administration and troubleshooting.
- Hands-on experience with SmartConnectors, EPS, correlation rules, Active Lists and event flow.
- Working experience with ArcSight SOAR and UBA/ArcSight Intelligence.
- Good knowledge of Linux/Unix and networking fundamentals.
- Understanding of Syslog, CEF, TCP/IP, SSL/TLS and REST APIs.
- Strong analytical, troubleshooting and problem-solving skills.
- Experience in SOC/MSSP or managed security services environment preferred.
- OpenText/ArcSight certification will be an added advantage.

Candidate Profile

The candidate should be hands-on, technically solid and capable of independently handling L2/L3 production issues, platform administration, troubleshooting and escalations in a security operations environment.

Skills:- ArcSight, Security Information and Event Management (SIEM), SOAR, IBM Connections, Integration, Automation, Office administration, configuration and UBA

📌 ArcSight/Engineer (Gurugram)
🏢 GIGABIT Technologies Pvt
📍 Gurugram