ArcSight Flex Connector Developer

Role :

ArcSight Flex Connector Developer

Desired Experience Range : 4-10 Years

Location of Requirement :

Pune & Hyderabad

Required Technical Skill Set :

knowledge of ArcSight SmartConnectors, FlexConnector Framework, and ArcSight Platform

Familiarity with regular expressions (regex) for parsing custom logs.

Experience with log onboarding, parsing, and normalization processes.

Log analysis (Analyst)

Integration of different types of log sources

Experience creating FlexConnector parsers using : Syslog, multi-line parser, Key-Value, Regex, JSON, XML, Database

Solid understanding of :

CEF (Common Event Format)

ArcSight Event Schema and Field Mapping

Device / Product Event Categorization

knowledge of Linux / Unix systems and basic scripting.

Must-Have Skills

knowledge of ArcSight Smart Connectors, Flex Connector Framework, and ArcSight Platform

Familiarity with regular expressions (regex) for parsing custom logs.

Experience with log onboarding, parsing, and normalization processes.

Log analysis (Analyst)

Integration of different types of log sources

Experience creating Flex Connector parsers using : Syslog, multi-line parser, Key-Value, Regex, JSON, XML, Database

Solid understanding of :

CEF (Common Event Format)

ArcSight Event Schema and Field Mapping

Device / Product Event Categorization

knowledge of Linux / Unix systems and basic scripting.

Responsibility of / Expectations from the Role

1.Design, develop, and deploy ArcSight FlexConnectors for custom log source integration.

2.Analyse and understand new log source formats (syslog, flat files, APIs, etc.).

3.Create parser files (. sdkkeyvaluefilereader, .sdkrfilereader, .sdkrfilereader.properties, etc.) based on log source requirements.

4.Validate and test connector parsing using ArcSight connector appliance or standalone SmartConnector.

5.Work closely with SOC analysts to ensure accurate mapping of fields to ArcSight data model.

6.Troubleshoot and resolve parsing and event categorization issues.

7.Maintain FlexConnector documentation, use cases, and deployment guides.

8.Collaborate with SOC / Ops teams to onboard new log sources into the SIEM platform.