ARC Sight Management Analyst

V2X; Kuwait; On-site; KWD 9,000 - 15,000; Full time

Benefits offered by this job

Company-paid housing

Transportation

Completion bonus

Tuition reimbursement

Job summary

V2X is seeking an ArcSight Management Analyst/SIEM Engineer to operate and maintain the Army SIEM environment. You will administer ELK stack components, Red Hat Linux, Windows Server, and related data ingestion tools in a security-focused setting.

The role requires active security clearance and DoD 8570/CE certifications, with responsibilities spanning configuration, monitoring, incident response, and RMF alignment within a fast-paced operations team.

Qualifications

• Active Secret Clearance required for work
• One or more DoD 8570.01M baseline or CE certifications required
• Experience with RMF in a DoD environment preferred
• Strong incident response, monitoring, and data analysis skills
• Proficient with SIEM configurations and ELK stack management

Responsibilities

• Implement, administer, and troubleshoot SIEM products (Elasticsearch, Kibana, Beats, Logstash)
• Maintain and operate Red Hat Enterprise Linux and Windows Server in SIEM context
• Manage configuration repositories and track network/system changes
• Ensure compliance with Cyber Security policies, TTPs, SOPs and RMF artifacts

Skills

SIEM platforms

Elasticsearch/Kibana/ELK

Red Hat Enterprise Linux

Windows Server

Confluent Kafka

Docker/Kubernetes

Education

DoD 8570.01M baseline & CE certifications

Tools

Docker

Kafka

Zookeeper

Logstash

Job description

The ArcSight Management Analyst proposed title change Security Information and Event Management SIEM Engineer performs operation and maintenance O amp M support of the Army SIEM Security Information and Event Management environment SIEM team members provide administrative support of Red Hat Enterprise Linux and Microsoft Windows Server operating systems assuring efficient data intake storage retrieval and analysis procedures across our organization Advises and assists customers with security configuration requirements Engineers assist with the Risk Management Framework RMF requirements Program OMDAC-SWACA This position offers company-paid housing and transportation a completion bonus and tuition reimbursement program You must satisfy all host country requirements to legally work in the host country to include but not limited to the ability to obtain and maintain a host nation visa and host nation driver's license in order to be qualified for this position strong Responsibilities strong Responsible for implementation administration and troubleshooting of SIEM products including Elasticsearch Kibana Beats amp Logstash ELK Organize repositories for configuration information and develop mechanisms to record and track network configuration changes Interpret analyze and monitor for compliance with Cyber Security policies Review and update Cyber Security tactics techniques and procedures TTPs and Standard Operating Procedures SOPs Responsible for installation administration and operation of Red Hat Enterprise Linux Microsoft Windows Server operating systems Confluent Kafka Docker LogStash Zookeeper and other associated SIEM products Ability to troubleshoot servers and infrastructure equipment Ability to assess networking requirements and provide solutions Attend and or conduct regular meetings to keep all parties appraised of network and communications data systems changes improvements and project progression as required Ability to make accurate and independent decisions under pressure Experience with a customer service-oriented environment Excellent organizational interpersonal written and verbal communication skills Ability to perform comfortably in a fast-paced deadline-oriented work environment Ability to successfully execute many complex tasks simultaneouslyPerforms other duties and assignments assigned

Qualifications

Security Clearance: Requires an active Secret ClearanceEducation / Certifications: One-year related experience can be substituted for one year of education if the degree is required. High School diploma or GED required, some college preferred.This position requires candidates to adhere to DoD 8570.01M. All candidates are required to maintain at least one (1) baseline certification and one (1) computing environment (CE) certification. Baseline certifications cannot also be used as a Computing Environment (CE) certification. The authorized certifications for this job title are listed as follows:Baseline: CompTIA: CASP+ ce: Advanced Security Practitioner CompTIA: SecurityX ce GIAC: GCED: Certified Enterprise Defender GIAC: GCIH: Certified Incident Handler GIAC: GICSP: Industrial Cyber Security Professional GIAC: GSEC: Security Essentials ISACA: CISA: Certified Information Systems Auditor ISC2: CISSP (or Associate): Certified Information Systems Security Professional ISC2: SSCP: Systems Security Certified PractitionerComputing Environment (CE): Microsoft: 365 Certified: Enterprise Administrator Expert Microsoft: 365 Certified: Messaging Administrator Associate Microsoft: 365 Certified: Security Administrator Associate Microsoft: Certified: Azure Administrator Associate Microsoft: Certified: Azure Database Administrator Associate Microsoft: Certified: Azure Security Engineer Associate Microsoft: Certified: Azure Solutions Architect Expert Microsoft: Certified: Identity and Access Administrator Associate Microsoft: Certified: Information Protection Administrator Associate Microsoft: Certified: Security Operations Analyst Associate Microsoft: MCSE: Cloud Platform and Infrastructure Microsoft: MCSE: Core Infrastructure Microsoft: MCSE: Database Management and Analytics Microsoft: MCSE: Productivity Solutions Expert Microsoft: MCSE: Server Infrastructure 2016 Microsoft: MCSM: Certified Solutions Master (Any) Red Hat: RHCA: Certified Architect (Any) Red Hat: RHCE: Certified Engineer Red Hat: RHCSA: Certified System AdministratorExperience: One year of related academic study above the high school level may be substituted for one year of experience up to a maximum of a 4-year bachelor's degree in a Software Engineering or Business Information Systems discipline for three years general experience.Requires a minimum of seven (5) years of experience in administrative, technical work, which demonstrates the ability and aptitude required to perform technical and analytical work involving information management systems. Platforms including a combination of the following: Elastic Kibana Red Hat Linux Microsoft Windows and relational databases.Experience with a customer service-oriented company.

Skills & Technology Used

Proficiency administering and troubleshooting SIEM platforms, including Elasticsearch, Kibana, Beats, Logstash, and related ELK Stack components.Proficiency supporting Red Hat Enterprise Linux and Microsoft Windows Server operating systems in a SIEM or enterprise security environment.Working knowledge of Confluent Kafka, Docker, Zookeeper, Logstash, and related data ingestion or pipeline technologies.Ability to monitor, validate, and troubleshoot log ingestion, parsing, indexing, retention, and search performance across SIEM data sources.Ability to organize, document, and maintain configuration repositories and track network or system configuration changes.Knowledge of cybersecurity policies, TTPs, SOPs, and compliance documentation in support of operational security requirements.Familiarity with Risk Management Framework (RMF) requirements and supporting artifacts.Proficiency using Microsoft productivity tools, Microsoft Visio, ServiceNow, email client software, and corporate mobility applications.Ability to troubleshoot servers, infrastructure equipment, and data flow issues in a fast-paced operational environment.Strong analytical, organizational interpersonal, written, and verbal communication skills.