ArcSight Experts in Germany
for secure, connected SIEM operations with fast AI matchingHire experts who design ArcSight SIEM architectures, build event correlation and detection rules, and connect security data from complex environments. FRATCH matches you quickly and precisely with vetted, available freelancers.
Meet FRATCH Experts in Germany, who have recently used ArcSight
Tobias S.
Last position:
Project Manager SAP S/4 HANA Public Cloud at TIMETOACT Group
To achieve savings and optimize compliance, apps were restructured in line with the mappings in identity management, restrictions were defined and, above all, costs resulting from overuse were reduced. Communication with stakeholders, validation of authorizations with users and technical implementation in the SAP FI/CO and Sourcing & Procurement modules created significant added value for the group. This also included the corresponding documentation for the auditors.
Pierre G.
Last position:
Ansible Automation, Windows Third Level Support at DB InfraGO AG
- PRISMA project
- Ansible automation
- Windows third-level support for Windows NT, Windows 2000, Windows 2013, Windows 2016, Windows 2019
Enrique G.
Last position:
Security Architect at Capgemini
I implemented a Zero-Trust architecture for robust, military-grade maritime container mini data centers based on VMware & Tanzu to support containerized GIS workloads for ground forces. The main focus was on securing communications, workload protection, and data access in contested electronic battle environments affected by jamming, interception, signal manipulation, and constantly changing operational conditions. I designed and architected use cases so that every element of workload, identity, and system could continue to operate independently and securely even in degraded or disrupted scenarios. In parallel, I defined the enterprise and solution security architecture with LeanIX, Bizzdesign, and HOPEX as enterprise architecture, repository, and governance platforms to maintain architecture inventory, relationships, traceability, target pictures, and security governance in complex environments. For the architectural designs, I used Sparx Enterprise Architect to describe formal architecture views, interfaces, trust boundaries, and system architecture in both IT and OT environments. IriusRisk was used for threat modeling of the solution to identify architecture-driven risks, derive security requirements, and detect countermeasures and design gaps directly from the solution models. Risk and compliance management was supported with Archer. Architecture decisions, control gaps, and operational risks were translated into controlled governance and auditable compliance measures. For documentation, collaboration, and visual design, I used Confluence to maintain Architecture Decision Records, Security Blueprints, and workflows. I used Lucidchart and draw.io to create design artifacts tailored to stakeholders. I also defined OT security concepts with support from electrical and mechanical engineers in the areas of oil, vehicle onboard systems, rail, power plants, pharma, gas turbines, and nuclear technology. I created the end-to-end OT security strategy, starting with global policy, developed into standards and procedures, and finally aligned with Bell-LaPadula, Purdue Model, SABSA, TOGAF ADM, CENELEC 50701, IEC 62443, and NIST standards. In addition, I worked with engineering team leads to identify critical KBP assets and place them under protective measures that segmented SCADA, PLC, and HMI assets. I drove collaboration between Security, IT, and OT teams to create standardized workflows and use cases for the OT security solution catalog, while integrating Defense-in-Depth and Zero-Trust principles into operational environments. A key part of my work was integrating multidisciplinary engineering, security, and operations stakeholders into a unified security blueprinting strategy and ensuring that architecture, threat modeling, governance, and documentation were technically strong and operationally practical.
Bernhard B.
Last position:
Senior Security Architect at Intermediate Beratung
- Consulting on an ongoing IT security architecture project
- Documenting past progress and planning next steps
- Applying and implementing the BSI IT baseline protection
- Building and maintaining security management systems
- Applying the ISO 27001 standard series
- Integrating ITIL processes into security architectures
- Collaborating with public clients, regulatory authorities and internal and external service providers
Christian D.
Last position:
Managing Director and Senior Consultant at business-security (b-sec®) GmbH
- Conceptual consulting for securing business processes
- Consulting on planning and implementation of IT and IT security projects
- Security and policy checks, process optimizations, emergency planning
- Project management and interim management in IT infrastructure and information security
Overview of relevant projects:
- 2025: Consulting on a DLP concept for Digid GmbH.
- 2025: Consulting a client after a cybersecurity attack that compromised the IT infrastructure and where the attacker obtained M365 tenant admin rights. Investigated the IT infrastructure and restored it. Developed recommendations to improve IT security.
- 2025: Continued the projects listed below for Thyssenkrupp Marine Systems and Norddeutsche Landesbank.
- 2024: Created a DNS concept including advice on DNS strategy and technology, DNS design, DNS security, load balancing, reverse lookup zones, and automation. Created a DHCP concept including advice on DHCP design, a central DHCP management system and automation. Advised on operating the mentioned products, the operational processes, and updated IT documentation and IT service descriptions for Thyssenkrupp Marine Systems.
- 2024: As-is analysis and assessment of the network and security infrastructure established by providers in terms of overall architecture including design and components. Designed solution proposals to improve current operations for performance and security maximization as well as complexity reduction. Presented the results to C-level, their causes and possible solutions including required decision templates. Developed a SASE concept based on a zero-trust architecture for Norddeutsche Landesbank.
- 2024: Continued the projects listed below for Atlas GmbH and Deutsche Vermögensberatung AG.
- 2023: Consulting on resolving findings from an IT security assessment of the IT infrastructure, conducting proofs of concept for DDoS protection and digital experience monitoring (DEM) with Zscaler (ZIA, ZPA & ZDX), creating a new security architecture based on zero trust, redesigning a Cisco ISE implementation, and designing a DNS security solution to protect guests and financial advisors for Atlas GmbH / Deutsche Vermögensberatung AG.
- 2023: Continued the projects listed below for Digid GmbH, Vaillant Group GmbH (until 09/2023), Federal Institute for Geosciences and Natural Resources (until 05/2023), and Union Investment IT-Services GmbH (until 07/2023).
- 2022: Created and reviewed whitepapers for infrastructure and security architectures, and planned new network infrastructures for the German Aerospace Center.
- 2022: Developed a concept for the technical and procedural modernization of a disaster recovery plan for United Nations Volunteers.
- 2022: Developed a concept for migrating measurement data to a cloud environment, introduced network access control, and conducted an awareness training for Digid GmbH.
- 2022: Developed a network segmentation concept for DZ Hyp AG.
- 2022: Developed a network segmentation concept for the Federal Employment Agency.
- 2021: Developed a new load balancer architecture concept for Bundeswehr Fuhrparkservices GmbH.
- 2021: Conducted a vulnerability scan and penetration test of a web frontend including analysis and recommendations for remediation considering risk and likelihood for the client ifi GmbH.
- 2021: Consulting, design, and subproject management for implementing a network access control solution (certificate authentication and MAC address bypass) and macro segmentation (area and zone concept based on dynamic device assignment) in office and production IT for Vaillant Group GmbH.
- 2021: Upgraded and optimized LAN and WLAN infrastructure for United Nations Volunteers.
- 2021: Developed a target concept for modernizing the IT security infrastructure including the DMZ (Cisco switches, firewalls, WSA, ESA, SMA), internet connections, admin and management networks, and the wireless LAN, including overseeing implementation for the Federal Institute for Geosciences and Natural Resources.
- 2021: Created a micro-segmentation concept based on Cisco DNA, SGT, and zero trust for Union Investment IT-Services GmbH.
- 2021: Reviewed and updated ISMS level 3 policies and created procedure instructions for Software AG.
- 2021: Project lead for the global tech refresh project Meraki WLAN 2.0, coordinated the outsourcing of LAN/WLAN infrastructure to a managed service provider, and created a WLAN concept for automated guided vehicles for Heraeus Infosystems GmbH.
- 2021: Project management and technical support for the 'Transition of SIEM/SOC Services' project migrating a client to a shared environment, and took on the interim role of Head of Security Operations at Datagroup SE.
- 2021: Conducted a workshop for the future implementation of mobile device management for Allgeier Experts Go GmbH.
- 2021: Subproject management for implementing a firewall rule management tool and recertifying NAC endpoints based on 802.1x and MAB for Union Investment IT-Services GmbH.
- 2020: Developed a network segmentation concept for two data centers based on Cisco and VMware for Aareon AG.
- Recorded and analyzed the current network architecture including project initiation.
- Designed a micro-segmentation concept in the data center and access network.
- 2020: Infrastructure and security architecture audit for Stuttgarter Versicherung AG.
- Analyzed the IT infrastructure and security architecture regarding network and security component configurations. Also reviewed contracts, process documents, and manuals for completeness. Developed recommendations to improve the stability and operation of the infrastructure. Created a network segmentation concept and led the project to implement the measures from the audit.
- 2020: Consulting on setting up an ISMS-light for Josera foodforplanet GmbH & Co. KG.
- 2020: Security architecture consulting for Datagroup SE.
- Developed a future IT infrastructure and IT security architecture.
- Documented the current IT architecture of all 23 entities.
- Made recommendations to optimize the IT infrastructure and drafted a comparison of a traditional perimeter security concept versus a zero trust model.
- Created a security zone concept.
- Designed an IT infrastructure architecture in coordination with all entities.
- 2018 - 2019: Stream lead in the cybersecurity program at Deutsche Lufthansa AG.
- Responsible for designing and implementing 9 projects in IT security infrastructure and user access management, as well as managing project managers and experts.
- Project area: Network segmentation and access control.
- Project area: Security architecture.
- Project area: Privileged, identity & access management.
- Project area: Simplify user authentication (MFA).
- Project area: Mobile & endpoint security.
- Project area: OT security.
- Project area: E-enabled aircraft.
- 2018: Security architecture consulting for Deutsche Lufthansa AG.
- Project management for the development, evaluation, and management of the company-wide information security architecture.
- Developed a security strategy and a roadmap to align the security architecture with the zero trust model.
- Evaluated market security solutions, services, and tools.
- Defined requirements for RFPs and assessed proposals.
- Developed, maintained, and monitored security architecture artifacts.
- Conducted security assessments of existing and new IT systems and security services.
- 2018: ISMS consulting for GLS IT Services GmbH.
- Advised on implementing and initially operating an ISMS based on ISO27001.
- Audited the IT environments of GLS country subsidiaries.
- Analyzed and assessed IT security risks and derived necessary measures.
- Developed solution proposals in coordination with relevant stakeholders.
- Managed the project and handed over the ISMS to operations.
- 2016 - 2018: Security pre-sales consultant for Cisco Systems GmbH.
- Provided nationwide strategic and conceptual consulting to major enterprise and financial and insurance clients on Cisco and Meraki security products and services such as Firepower, WSA, ESA, Stealthwatch, and ISE.
- 2017 - 2018: Designed and implemented an ISMS for Verivox GmbH.
- Conducted various BIAs and gap analyses.
- Developed security policies based on ISO 2700x.
- Served as interim information security officer.
- 2017: Developed an emergency concept for VPV Lebensversicherungs-AG.
- Reviewed and updated the IT emergency manual.
- 2016: Consulting and project management for designing cloud & hosting services for Vodafone Group Services GmbH.
- Analyzed and optimized the sell-build-run process.
- Created detailed level designs for cloud products.
Oumarou B.
Last position:
Network Administrator WAN & Data Center at Teamative Germany GmbH
- Implementation, administration, configuration and operation of Cisco network components (PE-CE routers, provider routers, SD-WAN, switches, access gateways)
- Ensuring availability, performance, ongoing development and operation of the WAN access network infrastructure
- Creating technical documentation in FNT-Command
- Troubleshooting and handling incidents, changes, requests and problems tickets
- Tools: ITSM, Command-FNT, Orion, ASDM, Panorama
- Scripting: Bash Shell, Python, Ansible
- Protocols: IS-IS, BGP, MPLS, VRF, GETVPN, Segment Routing, Static Routing
- Devices: NCS-57C3 Series, ASR-1000 Series, ISR-4331, ISR-4451 SD-WAN, Catalyst 9k Series, Nexus 9k Series
- Firewall: Check Point, Palo Alto, Cisco ASA-5585, FWSM
Christian F.
Last position:
Deutsche Post DHL Group
- Leadership development training
- ITIL
- Prince2
Discover over 15,000 top freelancers
Statistics of experts using ArcSight
Aggregated from the professional profiles of matched freelancers.
Experience
24 years
Position duration
1.8 years
Positions per freelancer
20
Top business areas
Information Technology, Project Management, Operations
Top industries
Information Technology, Banking and Finance, Aerospace and Defense
Certification focus areas
Information Technology, Audit, Legal
Bachelor's degree or higher
80%
Master's degree or higher
60%
Doctorate
20%
Certifications per freelancer
11
Most common languages
German, English, French
Speak two or more languages
100%
Based on our profile pool as of 19 Sep 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Germany are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Germany using ArcSight
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 19 Sep 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
ArcSight experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (100%)
- Banking and Finance (71%)
- Aerospace and Defense (57%)
- Transportation (57%)
- Manufacturing (57%)
- Government and Administration (57%)
- Telecommunication (57%)
- Automotive (43%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
ArcSight at a glance
ArcSight is a security information and event management technology used to collect, normalize, correlate and investigate security events. It helps security teams connect logs from networks, endpoints, identity systems, cloud services and business applications in one operational view. Its tools support threat detection, incident response, compliance reporting and long-term security monitoring.
Core components
The ArcSight ecosystem includes ArcSight Enterprise Security Manager, ArcSight Intelligence, ArcSight Logger and connectors for many data sources. Specialists work with event normalization, correlation rules, dashboards, active channels, retention policies and case workflows. They may also connect ArcSight with ticketing, endpoint security, identity and orchestration tools.
Typical use cases
- Centralize events from hybrid infrastructure and security products
- Correlate suspicious activity across users, hosts and applications
- Build detection content for incidents, policy violations and insider risk
- Support audit evidence, reporting and investigation workflows
ArcSight is often used where organizations need controlled, traceable security operations across varied systems. In Germany, it can appear in regulated industries, manufacturing, telecom, finance and public-sector environments, where reliable monitoring and clear processes matter.
When to bring in expertise
Companies bring in freelance ArcSight specialists during SIEM migrations, connector rollouts, detection-content projects and operational redesigns. They can also help when event volumes are difficult to manage, rules create excessive noise, or analysts lack a consistent investigation process. Short-term expertise is useful for audits, upgrades and integration work without expanding the permanent team.
Skills that matter
Strong professionals understand ArcSight administration as well as security operations. They can map data sources, tune parsers and filters, design useful correlation logic, investigate events and document decisions. Experience with Windows and Linux logging, network protocols, identity data, threat intelligence, scripting and APIs adds practical value. Familiarity with IT service management and compliance requirements helps turn detections into repeatable processes.
What quality looks like
Good ArcSight work produces useful alerts, explainable rules and dependable data flows rather than a crowded console. A capable specialist tests connectors, validates timestamps and fields, measures false positives through operational feedback and documents every important change. They communicate clearly with security, infrastructure and application teams, whether collaboration is remote or on site in Germany, and leave maintainable content behind.
Frequently asked questions
Questions about ArcSight? Start with the answers below.
ArcSight is used for SIEM operations: collecting security events, correlating activity and supporting detection and incident investigation. Companies also use it for compliance reporting, centralized monitoring and security workflows across on-premises, cloud and hybrid environments.
ArcSight is commonly weighed against Splunk and Microsoft Sentinel for SIEM projects. The right choice depends on existing data sources, cloud strategy, detection requirements, licensing, operating model and the skills already available; a specialist should compare the full design rather than only product features.
A strong ArcSight specialist usually understands log management, network and endpoint security, identity systems and incident response. Useful adjacent skills include Linux and Windows event sources, REST APIs, scripting, threat intelligence, IT service management and security automation.
The right level of ArcSight experience depends on the work. A connector or rule-tuning task needs different depth than a platform migration, detection-content redesign or major operating-model change. Ask candidates to show comparable deliverables, explain their decisions and describe how they validated results.
ArcSight work can often be handled remotely when access, documentation and change controls are ready. On-site collaboration may still help with restricted environments, workshops or data-source ownership; German-language communication can matter when the specialist works closely with local operations, audit or compliance teams.
For ArcSight, review the quality of event normalization, connector stability, correlation logic and investigation documentation. Good work produces relevant alerts, controlled noise, clear ownership and repeatable tests, not simply a large number of configured rules.
An ArcSight freelancer may deliver a solution design, connector configuration, parser and mapping updates, correlation rules, dashboards, runbooks and migration documentation. They can also create tuning plans, test cases, reporting views and handover sessions for the internal security team.
ArcSight is the current product name most commonly used in project requirements. Search discussions may also refer to ArcSight ESM, ArcSight Enterprise Security Manager or the broader Micro Focus ArcSight portfolio, so matching the exact product edition and component is important.
The average hourly rate of freelancers in Germany who have used ArcSight in their recent projects is 104 €, which corresponds to a daily rate of about 829 € based on an 8-hour working day.
Of the freelancers in Germany who have used ArcSight in their recent projects, 80% hold at least a Bachelor's degree, 60% hold at least a Master's degree, and 20% hold a doctorate.
On average, freelancers in Germany who have used ArcSight in their recent projects have 24 years of professional experience, with a single engagement typically lasting around 1.8 years.
The most common languages among freelancers in Germany who have used ArcSight in their recent projects are German (100%), English (100%), and French (57%).
The most common industries among freelancers in Germany who have used ArcSight in their recent projects are Information Technology (100%), Banking and Finance (71%), and Aerospace and Defense (57%).
The most common business areas among freelancers in Germany who have used ArcSight in their recent projects are Information Technology (100%), Project Management (86%), and Operations (71%).
Main locations of FRATCH Experts, who have recently used ArcSight
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
