ArcSight Experts in Germany
with precise AI matching and vetted, available freelancersHire experts who monitor security events, build SIEM use cases and connect ArcSight with enterprise data sources. FRATCH matches you quickly and precisely with vetted, available freelancers who fit your project.
Meet FRATCH Experts in Germany, who have recently used ArcSight
Christian F.
Last position:
Project Lead & Cyber Security Consultant at Deutsche Börse Gruppe
- Established a cyber resilience framework for AI-accelerated threats in the Frontier AI Threat Endurance (FATE) program: capability assessments, maturity assessments and gap analyses covering cyber security, operational resilience, incident response, recovery and governance, followed by target concepts and improvement measures
- Supported action owners from specification through implementation: implementation roadmaps, decision papers, management presentations and governance reporting, as well as audit- and supervision-ready documentation; managed stakeholders from IT, Information Security, Risk Management, Operational Resilience, Business Continuity and the business units
Tobias S.
Last position:
Project Manager SAP S/4 HANA Public Cloud at TIMETOACT Group
To achieve savings and optimize compliance, apps were restructured in line with the mappings in identity management, restrictions were defined and, above all, costs resulting from overuse were reduced. Communication with stakeholders, validation of authorizations with users and technical implementation in the SAP FI/CO and Sourcing & Procurement modules created significant added value for the group. This also included the corresponding documentation for the auditors.
Christian D.
Last position:
Managing Director and Senior Consultant at business-security (b-sec®) GmbH
- Conceptual consulting for securing business processes
- Consulting for planning and implementing IT and IT security projects
- Security and policy checks, process optimization, contingency planning
- Project management and interim management in IT infrastructure and information security
Overview of relevant projects:
- 2025: Consulting on a DLP concept and for Digid GmbH.
- 2025: Consulting for a customer after a cybersecurity attack in which the IT infrastructure was compromised and the attacker gained M365 tenant admin rights. Investigation and recovery of the IT infrastructure. Preparation of recommendations for increasing IT security.
- 2025: Continuation of the projects listed below for Thyssenkrupp Marine Systems and Norddeutsche Landesbank.
- 2024: Preparation of a DNS concept including consulting on DNS strategy and technology, DNS design, DNS security, load balancing, reverse lookup zones and automation. Preparation of a DHCP concept including consulting on DHCP design, the central DHCP management system and automation. Consulting on the operation of the products mentioned, operating processes, and adapting the IT documentation and IT service description for Thyssenkrupp Marine Systems.
- 2024: Analysis and assessment of the network and security infrastructure established by the providers with regard to the overall architecture, consisting of the design and components. Development of proposed solutions to improve current operations, maximize performance and security, and reduce complexity. Presentation of the results, their causes and possible solutions to C-level management, including the required decision templates. Development of a SASE concept based on a Zero Trust architecture for Norddeutsche Landesbank.
- 2024: Continuation of the projects listed below for Atlas GmbH and Deutsche Vermögensberatung AG.
- 2023: Consulting on resolving findings from an IT security assessment of the IT infrastructure, conducting proof-of-concepts for DDoS protection and Digital Experience Monitoring (DEM) with Zscaler (ZIA, ZPA & ZDX), creating a new security architecture based on Zero Trust, redesigning a Cisco ISE implementation and designing a DNS security solution to protect guests and financial advisors for Atlas GmbH / Deutsche Vermögensberatung AG.
- 2023: Continuation of the projects listed below for Digid GmbH, Vaillant Group GmbH (until 09/2023), Bundesanstalt für Geowissenschaften und Rohstoffe (until 05/2023) and Union Investment IT-Services GmbH (until 07/2023).
- 2022: Preparation and review of white papers for infrastructure and security architectures, planning new network infrastructures for Deutsches Luft- und Raumfahrtzentrum.
- 2022: Development of a concept for the technical and process-related modernization of a disaster recovery plan for United Nations Volunteers.
- 2022: Development of a concept for moving measurement data to a cloud environment, introducing Network Access Control and conducting an awareness training session for Digid GmbH.
- 2022: Development of a network segmentation concept for DZ Hyp AG.
- 2022: Development of a network segmentation concept for Bundesagentur für Arbeit.
- 2021: Development of a new load balancer architecture for Bundeswehr Fuhrparkservices GmbH.
- 2021: Vulnerability scan and penetration test of a web frontend, including evaluation and preparation of recommendations for remediation, taking risk and probability of occurrence into account, for customer ifi GmbH.
- 2021: Consulting, concept development and sub-project management for introducing a Network Access Control solution (certificate authentication and MAC address bypass) and macro-segmentation (area and zone concept based on dynamic assignment of endpoints) in office and production IT for customer Vaillant Group GmbH.
- 2021: Upgrade and optimization of the LAN and WLAN infrastructure for customer United Nations Volunteers.
- 2021: Development of a target concept for modernizing the IT security infrastructure consisting of the DMZ (Cisco switches, firewalls, WSA, ESA, SMA), internet access, admin and management networks and wireless LAN, including support during implementation, for Bundesanstalt für Geowissenschaften und Rohstoffe.
- 2021: Creation of a micro-segmentation concept based on Cisco DNA and SGT and Zero Trust for Union Investment IT-Services GmbH.
- 2021: Review and update of ISMS Level-3 policies and preparation of process instructions for customer Software AG.
- 2021: Project management for the global Tec-Refresh project Meraki WLAN 2.0, coordination of outsourcing the LAN/WLAN infrastructure to a managed service provider and preparation of a WLAN concept for automated guided vehicles for customer Heraeus Infosystems GmbH.
- 2021: Project management and technical support for the “Transition of SIEM/SOC Services” project of a customer into a shared environment and assumption of the interim role of Head of Security Operations at customer Datagroup SE.
- 2021: Workshop for a future implementation of Mobile Device Management at customer Allgeier Experts Go GmbH.
- 2021: Sub-project management for introducing a rule management tool for firewalls and recertifying NAC endpoints based on 802.1x and MAB at customer Union Investment IT-Services GmbH.
- 2020: Development of a network segmentation concept for two data centers based on Cisco and VMware for Aareon AG.
- Recording and analysis of the current network architecture, including project initiation.
- Development of a concept for micro-segmentation in the data center and access network.
- 2020: Infrastructure and security architecture audit for customer Stuttgarter Versicherung AG.
- Analysis of the IT infrastructure and IT security architecture with regard to the configuration of network and security components. Additional review of contracts, process descriptions and manuals for completeness. Development of recommendations to improve the stability and operation of the infrastructure. Preparation of a network segmentation concept and project management for implementing the measures from the analysis project.
- 2020: Consulting on setting up an ISMS-Light for customer Josera foodforplanet GmbH & Co. KG.
- 2020: Security architecture consulting for customer Datagroup SE.
- Development of a future IT infrastructure and IT security architecture.
- Analysis of the current IT architecture of all 23 companies.
- Recommendations for optimizing the IT infrastructure and preparation of a comparison between a classic perimeter security concept and the Zero Trust model.
- Preparation of a security zone concept.
- Preparation of an IT infrastructure architecture in coordination with all companies.
- 2018 - 2019: Stream Lead in the Cyber Security program of Deutsche Lufthansa AG.
- Responsible for designing and implementing 9 projects in IT security infrastructure and user access management, as well as managing project managers and experts.
- Project area: Network Segmentation and Access Control.
- Project area: Security Architecture.
- Project area: Privileged, Identity & Access Management.
- Project area: Simplify User Authentication (MFA).
- Project area: Mobile & Endpoint Security.
- Project area: OT Security.
- Project area: E-enabled Aircraft.
- 2018: Security architecture consulting for customer Deutsche Lufthansa AG.
- Project management for the development, evaluation and management of the company-wide information security architecture.
- Development of a security strategy and roadmap to align the security architecture with the Zero Trust model.
- Evaluation of security solutions, services and tools available on the market.
- Definition of requirements for RfPs and evaluation of offers.
- Development, maintenance and monitoring of security architecture artifacts.
- Conducting security assessments of existing and new IT systems and security services.
- 2018: ISMS consulting for customer GLS IT Services GmbH.
- Consulting on introducing and initially operating an ISMS based on ISO27001.
- Auditing the IT environments of the GLS country companies.
- Analysis and assessment of IT security risks and derivation of required measures.
- Development of proposed solutions in coordination with the relevant stakeholders.
- Project management and transition of the ISMS to later operations.
- 2016 - 2018: Security Pre-Sales Consultant for customer Cisco Systems GmbH.
- Nationwide strategic and conceptual consulting for major enterprise customers and financial and insurance customers on Cisco and Meraki security products and services such as Firepower, WSA, ESA, Stealthwatch and ISE.
- 2017 - 2018: Design and implementation of an ISMS for customer Verivox GmbH.
- Conducting various BIAs and GAP analyses.
- Preparation of security policies based on ISO 2700x.
- Assumption of the interim role of Information Security Officer.
- 2017: Preparation of a contingency concept for VPV Lebensversicherungs-AG.
- Review and update of the IT contingency manual.
- 2016: Consulting and project management for the design of cloud and hosting services for customer Vodafone Group Services GmbH.
- Analysis and optimization of the sell-build-run process.
- Preparation of detailed-level designs for cloud products.
Pierre G.
Last position:
Ansible Automation, Windows Third Level Support at DB InfraGO AG
- PRISMA project
- Ansible automation
- Windows third-level support for Windows NT, Windows 2000, Windows 2013, Windows 2016, Windows 2019
Bernhard B.
Last position:
Technical Project Manager – VS-NfD Security Project
- Preparation of a complete IT security concept (ISiKo)
- Implementation of BSI / NATO / national security requirements
- Risk analysis, documentation, audit preparation
- Consulting and management of development teams in Cybersecurity Recovery and Resilience
- Genua firewalls, VPN, VS-NfD migration from Checkpoint and PaloAlto firewalls
- Administration of log sources: firewall traffic, ALG (SIP calls), ATP, DLP
- System administration – servers, AD, clients (according to BSI)
- Stakeholder communication (C-level / government agencies)
Enrique G.
Last position:
Security Architect at Capgemini
I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.
Oumarou B.
Last position:
WAN & Data Center Network Administrator at Teamative Germany GmbH
- Implementation, administration, configuration and operation of Cisco network components (PE-CE routers, provider routers, SD-WAN, switches, access gateways)
- Ensuring the availability, performance, further development and operation of the network infrastructure of the state access network WAN
- Creation of technical documentation in FNT-Command
- Troubleshooting and handling of incidents, changes, requests and problems tickets
- Tools: ITSM, Command-FNT, Orion, ASDM, Panorama
- Scripting: Bash Shell, Python, Ansible
- Protocols: IS-IS, BGP, MPLS, VRF, GETVPN, Segment-Routing, Static routing
- Devices: NCS-57C3 Series, ASR-1000 Series, ISR-4331, ISR-4451 SD-WAN, Catalyst 9k Series, Nexus 9k Series
- Firewall: Check Point, Palo Alto, Cisco ASA-5585, FWSM
Discover over 15,000 top freelancers
Statistics of experts using ArcSight
Aggregated from the professional profiles of matched freelancers.
Experience
24 years
Position duration
1.8 years
Positions per freelancer
23
Top business areas
Information Technology, Project Management, Audit
Top industries
Information Technology, Banking and Finance, Government and Administration
Certification focus areas
Information Technology, Audit, Legal
Bachelor's degree or higher
67%
Master's degree or higher
50%
Doctorate
17%
Certifications per freelancer
12
Most common languages
German, English, French
Speak two or more languages
100%
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Germany are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Germany using ArcSight
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
ArcSight experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (100%)
- Banking and Finance (86%)
- Government and Administration (71%)
- Energy (57%)
- Healthcare (57%)
- Transportation (57%)
- Manufacturing (57%)
- Telecommunication (57%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
Security Event Management
ArcSight is a security information and event management platform from OpenText. It collects logs and security events, normalizes them, correlates related activity and helps security teams investigate threats across complex enterprise environments. Its central role is turning scattered technical signals into searchable, actionable incidents.
Core Components
The ArcSight ecosystem includes ArcSight Enterprise Security Manager, ArcSight Logger, SmartConnectors and ArcSight Intelligence. Specialists configure event pipelines, data models, correlation rules, dashboards, retention policies and access controls. They also work with common formats such as CEF and integrate identity, endpoint, network, cloud and application sources.
Typical Use Cases
- Centralize firewall, proxy, endpoint and identity logs
- Create correlation rules for suspicious behavior
- Support incident investigation and threat hunting
- Build compliance reports and audit-ready evidence
- Improve visibility across hybrid infrastructure
ArcSight is often used where many systems must be monitored through one operational view. It can support security operations, managed security services, financial institutions, manufacturers and public-sector environments.
When Specialists Help
Companies bring in freelance ArcSight specialists during a new SIEM rollout, a migration, a connector expansion or a major rule review. They can assess an existing deployment, remove noisy detections, improve parsing and document operational processes. In Germany, on-site workshops may matter for regulated or highly segmented environments, while configuration and analysis can often happen remotely.
Skills That Matter
Strong professionals understand more than the console. They combine ArcSight administration with log management, network protocols, authentication, endpoint telemetry, incident response and detection engineering. Useful adjacent knowledge includes Python or scripting, regular expressions, REST interfaces, threat intelligence, MITRE ATT&CK concepts and integrations with ticketing or orchestration tools.
Choosing the Right Expert
Look for practical evidence of connector design, event normalization, rule tuning and incident workflows in environments similar to yours. Ask how the specialist measures false positives, protects sensitive log data and tests changes before release. Clear documentation, structured troubleshooting and the ability to explain detection logic to German and international stakeholders are strong signs of quality.
Frequently asked questions
Questions about ArcSight? Start with the answers below.
ArcSight is used to collect, normalize and correlate security events from infrastructure, applications, identities and endpoints. Companies use it for monitoring, incident investigation, threat detection, compliance reporting and centralized log analysis.
ArcSight is often compared with Splunk and Microsoft Sentinel as a SIEM option for centralized security monitoring. The right choice depends on existing data sources, cloud strategy, licensing, analyst workflows, detection content and the skills already available in the organization.
A strong ArcSight specialist usually understands network and endpoint telemetry, identity systems, incident response and log parsing. Experience with CEF, SmartConnectors, regular expressions, scripting, REST integrations and threat intelligence is also valuable.
The scope of ArcSight work matters more than a fixed experience threshold. A connector adjustment may need focused product knowledge, while a new SIEM deployment or rule overhaul calls for proven experience with architecture, event quality, detection logic and operational handover.
ArcSight configuration, rule development, documentation and event analysis can often be completed remotely from Germany. On-site collaboration may still help when access controls, segmented networks, sensitive data or workshops with local security and infrastructure teams are involved.
Before engaging an ArcSight freelancer, clarify the data sources, deployment model, access process, compliance requirements and expected deliverables. Also agree on communication language, working hours and whether the specialist must attend on-site sessions in Germany.
Assess whether the ArcSight specialist can explain event flows, parsing decisions, correlation logic and testing methods in clear terms. Review examples of documented rules, reduced alert noise, reliable dashboards and clean handover materials rather than relying only on product familiarity.
Typical ArcSight deliverables include connector configurations, normalized event mappings, correlation rules, dashboards, reports and operating procedures. A thorough specialist may also provide tuning recommendations, test evidence, integration documentation and a prioritized backlog for future detection improvements.
The average hourly rate of freelancers in Germany who have used ArcSight in their recent projects is 109 €, which corresponds to a daily rate of about 869 € based on an 8-hour working day.
Of the freelancers in Germany who have used ArcSight in their recent projects, 67% hold at least a Bachelor's degree, 50% hold at least a Master's degree, and 17% hold a doctorate.
On average, freelancers in Germany who have used ArcSight in their recent projects have 24 years of professional experience, with a single engagement typically lasting around 1.8 years.
The most common languages among freelancers in Germany who have used ArcSight in their recent projects are German (100%), English (100%), and French (57%).
The most common industries among freelancers in Germany who have used ArcSight in their recent projects are Information Technology (100%), Banking and Finance (86%), and Government and Administration (71%).
The most common business areas among freelancers in Germany who have used ArcSight in their recent projects are Information Technology (100%), Project Management (86%), and Audit (71%).
Main locations of FRATCH Experts, who have recently used ArcSight
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
