New answers tagged soc
A tool like HP ArcSight can be customized very deeply, and just writing the right use cases and rules to correlate relevant events and alert on meaningful incidents, is super hard. Many organizations fail miserably implementing ArcSight. Just getting raw logs through connectors to logger and then to ESM, and then writing use cases is a project that ...
I would advise taking the job. Security is a difficult field to get into without experience, and a few years of security operations experience will make you much better qualified for penetration testing jobs that may become available.
Top 50 recent answers are included