Job description
Role: Arc Sight Flex Connector Developer
Desired Experience Range: 4-10 Years
Location of Requirement: Pune & Hyderabad
Required Technical Skill Set:
knowledge of Arc Sight Smart Connectors, Flex Connector Framework, and Arc Sight Platform
Familiarity with regular expressions (regex) for parsing custom logs.
Experience with log onboarding, parsing, and normalization processes.
Log analysis (Analyst)
Integration of different types of log sources
Experience creating Flex Connector parsers using: Syslog, multi-line parser, Key-Value, Regex, JSON, XML, Database
Solid understanding of:
CEF (Common Event Format)
Arc Sight Event Schema and Field Mapping
Device/Product Event Categorization
knowledge of Linux/Unix systems and basic scripting.
Must-Have Skills
knowledge of Arc Sight Smart Connectors, Flex Connector Framework, and Arc Sight Platform
Familiarity with regular expressions (regex) for parsing custom logs.
Experience with log onboarding, parsing, and normalization processes.
Log analysis (Analyst)
Integration of different types of log sources
Experience creating Flex Connector parsers using: Syslog, multi-line parser, Key-Value, Regex, JSON, XML, Database
Solid understanding of:
CEF (Common Event Format)
Arc Sight Event Schema and Field Mapping
Device/Product Event Categorization
knowledge of Linux/Unix systems and basic scripting.
Responsibility of / Expectations from the Role
1.
Design, develop, and deploy Arc Sight Flex Connectors for custom log source integration.
2.
Analyse and understand new log source formats (syslog, flat files, APIs, etc.).
3.
Create parser files (.
sdkkeyvaluefilereader,.sdkrfilereader,.sdkrfilereader.properties, etc.) based on log source requirements.
4.
Validate and test connector parsing using Arc Sight connector appliance or standalone Smart Connector.
5.
Work closely with SOC analysts to ensure accurate mapping of fields to Arc Sight data model.
6.
Troubleshoot and resolve parsing and event categorization issues.
7.
Maintain Flex Connector documentation, use cases, and deployment guides.
8.
Collaborate with SOC/Ops teams to onboard new log sources into the SIEM platform.
Required Skill Profession
Other General