Must Have: Minimum 2 years of experience in the following- 1. Strong fundamentals of Network Security, SIEM products and ArcSight ESM skills from end to end understanding of the technology 2. Administration experience of ArcSight ESM, Logger and ConApp. 3. Strong ability to write correlation content to address complex use cases and build complex reports 4. Installation & configuration of SmartConnectors including Flex connectors Good to Have: 1. Strong understanding of ArcSight CEF, and syslog formats and events in general. 2. Strong varied technical experience with Unix/Linux and Windows, broad range of security devices, software development background or scripting. 3. Develop technical documentation, technical communications and project work plans. 4. Documents and maintains internal procedural standards relating to support role as required.