The ArcSight Management Analyst (proposed title change Security Information and Event Management (SIEM) Engineer) performs operation and maintenance (O&M) support of the Army SIEM (Security Information and Event Management) environment. SIEM team members provide administrative support of Red Hat Enterprise Linux and Microsoft Windows Server operating systems, assuring efficient data intake, storage, retrieval, and analysis procedures across our organization. Advises and assists customers with security configuration requirements. Engineers assist with the Risk Management Framework (RMF) requirements. Program: OMDAC-SWACA This position offers company-paid housing and transportation, a completion bonus and tuition reimbursement program! You must satisfy all host country requirements to legally work in the host country to include but not limited to the ability to obtain and maintain a host nation visa and host nation driver s license in order to be qualified for this position.

Responsibilities

• Responsible for implementation, administration, and troubleshooting of SIEM products including Elasticsearch, Kibana, Beats & Logstash (ELK).
• Organize repositories for configuration information and develop mechanisms to record and track network configuration changes.
• Interpret, analyze, and monitor for compliance with Cyber Security policies.
• Review and update Cyber Security tactics, techniques and procedures (TTPs) and Standard Operating Procedures (SOPs).
• Responsible for installation, administration, and operation of Red Hat Enterprise Linux, Microsoft Windows Server operating systems, Confluent Kafka, Docker, LogStash, Zookeeper and other associated SIEM products.
• Ability to troubleshoot servers and infrastructure equipment.
• Ability to assess networking requirements and provide solutions.
• Attend and or conduct regular meetings to keep all parties appraised of network and communications/data systems changes, improvements, and project progression as required.
• Ability to make accurate and independent decisions under pressure.
• Experience with a customer service-oriented environment.
• Excellent organizational, interpersonal, written, and verbal communication skills.
• Ability to perform comfortably in a fast-paced, deadline-oriented work environment.
• Ability to successfully execute many complex tasks simultaneously
• Performs other duties and assignments assigned.

Desired Candidate Profile

Qualifications

• Security Clearance: Requires an active Secret Clearance
• Education / Certifications: One-year related experience can be substituted for one year of education if the degree is required. High School diploma or GED required, some college preferred.
• This position requires candidates to adhere to DoD 8570.01M. All candidates are required to maintain at least one (1) baseline certification and one (1) computing environment (CE) certification. Baseline certifications cannot also be used as a Computing Environment (CE) certification. The authorized certifications for this job title are listed as follows:
• Baseline: CompTIA: CASP+ ce: Advanced Security Practitioner CompTIA: SecurityX ce GIAC: GCED: Certified Enterprise Defender GIAC: GCIH: Certified Incident Handler GIAC: GICSP: Industrial Cyber Security Professional GIAC: GSEC: Security Essentials ISACA: CISA: Certified Information Systems Auditor ISC2: CISSP (or Associate): Certified Information Systems Security Professional ISC2: SSCP: Systems Security Certified Practitioner
• Computing Environment (CE): Microsoft: 365 Certified: Enterprise Administrator Expert Microsoft: 365 Certified: Messaging Administrator Associate Microsoft: 365 Certified: Security Administrator Associate Microsoft: Certified: Azure Administrator Associate Microsoft: Certified: Azure Database Administrator Associate Microsoft: Certified: Azure Security Engineer Associate Microsoft: Certified: Azure Solutions Architect Expert Microsoft: Certified: Identity and Access Administrator Associate Microsoft: Certified: Information Protection Administrator Associate Microsoft: Certified: Security Operations Analyst Associate Microsoft: MCSE: Cloud Platform and Infrastructure Microsoft: MCSE: Core Infrastructure Microsoft: MCSE: Database Management and Analytics Microsoft: MCSE: Productivity Solutions Expert Microsoft: MCSE: Server Infrastructure 2016 Microsoft: MCSM: Certified Solutions Master (Any) Red Hat: RHCA: Certified Architect (Any) Red Hat: RHCE: Certified Engineer Red Hat: RHCSA: Certified System Administrator
• Experience: One year of related academic study above the high school level may be substituted for one year of experience up to a maximum of a 4-year bachelor's degree in a Software Engineering or Business Information Systems discipline for three years general experience.
• Requires a minimum of seven (5) years of experience in administrative, technical work, which demonstrates the ability and aptitude required to perform technical and analytical work involving information management systems. Platforms including a combination of the following: Elastic Kibana Red Hat Linux Microsoft Windows and relational databases.
• Experience with a customer service-oriented company.
• Skills & Technology Used: Proficiency administering and troubleshooting SIEM platforms, including Elasticsearch, Kibana, Beats, Logstash, and related ELK Stack components.
• Proficiency supporting Red Hat Enterprise Linux and Microsoft Windows Server operating systems in a SIEM or enterprise security environment.
• Working knowledge of Confluent Kafka, Docker, Zookeeper, Logstash, and related data ingestion or pipeline technologies.
• Ability to monitor, validate, and troubleshoot log ingestion, parsing, indexing, retention, and search performance across SIEM data sources.
• Ability to organize, document, and maintain configuration repositories and track network or system configuration changes.
• Knowledge of cybersecurity policies, TTPs, SOPs, and compliance documentation in support of operational security requirements.
• Familiarity with Risk Management Framework (RMF) requirements and supporting artifacts.
• Proficiency using Microsoft productivity tools, Microsoft Visio, ServiceNow, email client software, and corporate mobility applications.
• Ability to troubleshoot servers, infrastructure equipment, and data flow issues in a fast-paced operational environment.
• Strong analytical, organizational, interpersonal, written, and verbal communication skills.