ARC Sight Management Analyst

Vectrus, Inc; Kuwait; On-site; KWD 28,000 - 43,000; Full time

Benefits offered by this job

Company-paid housing

Company-paid transportation

Completion bonus

Tuition reimbursement program

Job summary

V2X is seeking an ArcSight Management Analyst (SIEM Engineer) to support Army SIEM environments. You will administer ELK-based SIEM, manage configurations, and ensure RMF and cybersecurity policy compliance in a fast-paced, cross-functional setting.

The role requires an active Secret Clearance, DoD 8570 CE certifications, and 5+ years of security operations experience in a government or defense context. Company-paid housing/transportation and a completion bonus are provided.

Qualifications

• Active Secret Clearance required.
• DoD 8570 baseline certs required; CE certs also required.
• 5+ years in admin/technical roles; SIEM experience preferred.
• Experience with ELK stack and enterprise security environments.
• Strong customer-service orientation and communication skills.

Responsibilities

• Implement, administer, and troubleshoot SIEM products including ELK Stack (Elasticsearch, Kibana, Beats, Logstash).
• Organize repositories for configuration information and track network configuration changes.
• Interpret and monitor Cyber Security policy compliance; update TTPs and SOPs.
• Install and operate RHEL, Windows Server, Confluent Kafka, Docker, Logstash, Zookeeper and related SIEM tools.
• Troubleshoot servers, networking, and data flow issues; participate in meetings to coordinate progress.

Skills

SIEM administration

ELK stack

Red Hat Linux

Windows Server

Docker

Kafka

RMF knowledge

Cybersecurity policies

Customer service

Education

DoD 8570 CE certifications

High School diploma or GED

Bachelor's degree preferred

Tools

Elasticsearch

Kibana

Beats

Logstash

Zookeeper

Confluent Kafka

Job description

Overview

Working across the globe, V2X builds smart solutions designed to integrate physical and digital infrastructure from base to battlefield. We bring 120 years of successful mission support to improve security, streamline logistics, and enhance readiness. Aligned around a shared purpose, our $3.9B company and 16,000 people work alongside our clients, here and abroad, to tackle their most complex challenges with integrity, respect, responsibility, and professionalism.

The ArcSight Management Analyst (proposed title change Security Information and Event Management (SIEM) Engineer) performs operation and maintenance (O&M) support of the Army SIEM (Security Information and Event Management) environment. SIEM team members provide administrative support of Red Hat Enterprise Linux and Microsoft Windows Server operating systems, assuring efficient data intake, storage, retrieval, and analysis procedures across our organization. Advises and assists customers with security configuration requirements. Engineers assist with the Risk Management Framework (RMF) requirements. Program: OMDAC-SWACA

This position offers company-paid housing and transportation, a completion bonus and tuition reimbursement program!

You must satisfy all host country requirements to legally work in the host country to include but not limited to the ability to obtain and maintain a host nation visa and host nation driver’s license in order to be qualified for this position.

• This position offers company-paid housing and transportation, a completion bonus and tuition reimbursement program!

Responsibilities

• Responsible for implementation, administration, and troubleshooting of SIEM products including Elasticsearch, Kibana, Beats & Logstash (ELK).
• Organize repositories for configuration information and develop mechanisms to record and track network configuration changes.
• Interpret, analyze, and monitor for compliance with Cyber Security policies. Review and update Cyber Security tactics, techniques, and procedures (TTPs) and Standard Operating Procedures (SOPs).
• Responsible for installation, administration, and operation of Red Hat Enterprise Linux, Microsoft Windows Server operating systems, Confluent Kafka, Docker, LogStash, Zookeeper and other associated SIEM products.
• Ability to troubleshoot servers and infrastructure equipment.
• Ability to assess networking requirements and provide solutions.
• Attend and or conduct regular meetings to keep all parties appraised of network and communications/data systems changes, improvements, and project progression as required.
• Ability to make accurate and independent decisions under pressure.
• Experience with a customer service-oriented environment.
• Excellent organizational, interpersonal, written, and verbal communication skills.
• Ability to perform comfortably in a fast-paced, deadline-oriented work environment.
• Ability to successfully execute many complex tasks simultaneously
• Performs other duties and assignments assigned.

Qualifications

• Qualifications
• Security Clearance:
  • Requires an active Secret Clearance
• Education / Certifications: One-year related experience can be substituted for one year of education if the degree is required.
  • High School diploma or GED required, some college preferred.
  • This position requires candidates to adhere to DoD 8570.01M. All candidates are required to maintain at least one (1) baseline certification and one (1) computing environment (CE) certification. Baseline certifications cannot also be used as a Computing Environment (CE) certification.
  • The authorized certifications for this job title are listed as follows:
• Baseline:
  • CompTIA: CASP+ ce: Advanced Security Practitioner
  • CompTIA: SecurityX ce
  • GIAC: GCED: Certified Enterprise Defender
  • GIAC: GCIH: Certified Incident Handler
  • GIAC: GICSP: Industrial Cyber Security Professional
  • GIAC: GSEC: Security Essentials
  • ISACA: CISA: Certified Information Systems Auditor
  • ISC2: CISSP (or Associate): Certified Information Systems Security Professional\li>
  • ISC2: SSCP: Systems Security Certified Practitioner
• Computing Environment (CE):
  • Microsoft: 365 Certified: Enterprise Administrator Expert
  • Microsoft: 365 Certified: Messaging Administrator Associate
  • Microsoft: 365 Certified: Security Administrator Associate
  • Microsoft: Certified: Azure Administrator Associate
  • Microsoft: Certified: Azure Database Administrator Associate
  • Microsoft: Certified: Azure Security Engineer Associate
  • Microsoft: Certified: Azure Solutions Architect Expert
  • Microsoft: Certified: Identity and Access Administrator Associate
  • Microsoft: Certified: Information Protection Administrator Associate
  • Microsoft: Certified: Security Operations Analyst Associate
  • Microsoft: MCSE: Cloud Platform and Infrastructure
  • Microsoft: MCSE: Core Infrastructure
  • Microsoft: MCSE: Database Management and Analytics
  • Microsoft: MCSE: Productivity Solutions Expert
  • Microsoft: MCSE: Server Infrastructure 2016
  • Microsoft: MCSM: Certified Solutions Master (Any)
  • Red Hat: RHCA: Certified Architect (Any)
  • Red Hat: RHCE: Certified Engineer
  • Red Hat: RHCSA: Certified System Administrator
• Experience: One year of related academic study above the high school level may be substituted for one year of experience up to a maximum of a 4-year bachelor's degree in a Software Engineering or Business Information Systems discipline for three years general experience.
  • Requires a minimum of seven (5) years of experience in administrative, technical work, which demonstrates the ability and aptitude required to perform technical and analytical work involving information management systems.
  • Platforms including a combination of the following:
    • Elastic
    • Kibana
    • Red Hat Linux
    • Microsoft Windows and relational databases.
  • Experience with a customer service-oriented company.
• Skills & Technology Used:
  • Proficiency administering and troubleshooting SIEM platforms, including Elasticsearch, Kibana, Beats, Logstash, and related ELK Stack components.
  • Proficiency supporting Red Hat Enterprise Linux and Microsoft Windows Server operating systems in a SIEM or enterprise security environment.
  • Working knowledge of Confluent Kafka, Docker, Zookeeper, Logstash, and related data ingestion or pipeline technologies.
  • Ability to monitor, validate, and troubleshoot log ingestion, parsing, indexing, retention, and search performance across SIEM data sources.
  • Ability to organize, document, and maintain configuration repositories and track network or system configuration changes.
  • Knowledge of cybersecurity policies, TTPs, SOPs, and compliance documentation in support of operational security requirements.
  • Familiarity with Risk Management Framework (RMF) requirements and supporting artifacts.
  • Proficiency using Microsoft productivity tools, Microsoft Visio, ServiceNow, email client software, and corporate mobility applications.
  • Ability to troubleshoot servers, infrastructure equipment, and data flow issues in a fast-paced operational environment.
  • Strong analytical, organizational, interpersonal, written, and verbal communication skills.

At V2X, we are deeply committed to both equal employment opportunity, including protection for Veterans and individuals with disabilities, and fostering an inclusive and diverse workplace. We ensure all individuals are treated with fairness, respect, and dignity, recognizing the strength that comes from a workforce rich in diverse experiences, perspectives, and skills. This commitment, aligned with our core Vision and Values of Integrity, Respect, and Responsibility, allows us to leverage differences, encourage innovation, and expand our success in the global marketplace, ultimately enabling us to best serve our clients.