ARC Sight Management Analyst - Secret Clearance

Role Overview

ARC Sight Management Analyst (proposed title: Security Information and Event Management (SIEM) Engineer) at V2X. This position provides operation and maintenance support of the Army SIEM environment. Program: OMDAC-SWACA. Secret Clearance required.

Company Overview

V2X is a $3.9B company with 16,000 employees working globally to build smart solutions that integrate physical and digital infrastructure. The organization brings 120 years of mission support experience to improve security, streamline logistics, and enhance readiness across government and defense clients.

Role Purpose

Provide operation and maintenance support of the Army SIEM environment, administer Red Hat Enterprise Linux and Microsoft Windows Server operating systems, and ensure efficient data intake, storage, retrieval, and analysis procedures across the organization while advising customers on security configuration requirements and supporting Risk Management Framework compliance.

Key Responsibilities

Implementation & Administration

• Perform implementation, administration, and troubleshooting of SIEM products including Elasticsearch, Kibana, Beats, and Logstash (ELK).
• Install, administer, and operate Red Hat Enterprise Linux, Microsoft Windows Server operating systems, Confluent Kafka, Docker, LogStash, Zookeeper, and other associated SIEM products.
• Organize repositories for configuration information and develop mechanisms to record and track network configuration changes.

Security & Compliance

• Interpret, analyze, and monitor for compliance with Cyber Security policies.
• Review and update Cyber Security tactics, techniques, and procedures (TTPs) and Standard Operating Procedures (SOPs).
• Advise and assist customers with security configuration requirements.
• Support Risk Management Framework (RMF) requirements.

Operations & Support

• Troubleshoot servers and infrastructure equipment.
• Assess networking requirements and provide solutions.
• Monitor, validate, and troubleshoot log ingestion, parsing, indexing, retention, and search performance across SIEM data sources.
• Attend and conduct regular meetings to keep all parties appraised of network and communications/data systems changes, improvements, and project progression as required.
• Perform other duties and assignments as assigned.

Decision-Making & Delivery

• Make accurate and independent decisions under pressure.
• Perform comfortably in a fast-paced, deadline-oriented work environment.
• Successfully execute many complex tasks simultaneously.
• Work in a customer service-oriented environment with excellent organizational, interpersonal, written, and verbal communication skills.

Qualifications & Experience

Security Clearance

• Active Secret Clearance required.

Education

• High School diploma or GED required; some college preferred.
• One year of related academic study above the high school level may be substituted for one year of experience, up to a maximum of a four-year bachelor's degree in Software Engineering or Business Information Systems discipline for three years of general experience.

Certifications

This position requires adherence to DoD 8570.01M. Candidates must maintain at least one baseline certification and one Computing Environment (CE) certification. Baseline certifications cannot also be used as a Computing Environment certification.

Baseline Certifications (select one)

• CompTIA CASP+: Advanced Security Practitioner
• CompTIA SecurityX
• GIAC GCED: Certified Enterprise Defender
• GIAC GCIH: Certified Incident Handler
• GIAC GICSP: Industrial Cyber Security Professional
• GIAC GSEC: Security Essentials
• ISACA CISA: Certified Information Systems Auditor
• ISC2 CISSP (or Associate): Certified Information Systems Security Professional
• ISC2 SSCP: Systems Security Certified Practitioner

Computing Environment (CE) Certifications (select one)

• Microsoft 365 Certified: Enterprise Administrator Expert
• Microsoft 365 Certified: Messaging Administrator Associate
• Microsoft 365 Certified: Security Administrator Associate
• Microsoft Certified: Azure Administrator Associate
• Microsoft Certified: Azure Database Administrator Associate
• Microsoft Certified: Azure Security Engineer Associate
• Microsoft Certified: Azure Solutions Architect Expert
• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft Certified: Information Protection Administrator Associate
• Microsoft Certified: Security Operations Analyst Associate
• Microsoft MCSE: Cloud Platform and Infrastructure
• Microsoft MCSE: Core Infrastructure
• Microsoft MCSE: Database Management and Analytics
• Microsoft MCSE: Productivity Solutions Expert
• Microsoft MCSE: Server Infrastructure 2016
• Microsoft MCSM: Certified Solutions Master (any)
• Red Hat RHCA: Certified Architect (any)
• Red Hat RHCE: Certified Engineer
• Red Hat RHCSA: Certified System Administrator

Experience

• Minimum seven (5) years of experience in administrative or technical work demonstrating ability and aptitude to perform technical and analytical work involving information management systems.
• Experience with platforms including a combination of Elastic, Kibana, Red Hat Linux, Microsoft Windows, and relational databases.
• Experience in a customer service-oriented company.

Skills & Competencies

Technical Proficiency

• Proficiency administering and troubleshooting SIEM platforms, including Elasticsearch, Kibana, Beats, Logstash, and related ELK Stack components.
• Proficiency supporting Red Hat Enterprise Linux and Microsoft Windows Server operating systems in a SIEM or enterprise security environment.
• Working knowledge of Confluent Kafka, Docker, Zookeeper, Logstash, and related data ingestion or pipeline technologies.
• Ability to organize, document, and maintain configuration repositories and track network or system configuration changes.
• Proficiency using Microsoft productivity tools, Microsoft Visio, ServiceNow, email client software, and corporate mobility applications.
• Ability to troubleshoot servers, infrastructure equipment, and data flow issues in a fast-paced operational environment.

Knowledge & Competencies

• Knowledge of cybersecurity policies, TTPs, SOPs, and compliance documentation in support of operational security requirements.
• Familiarity with Risk Management Framework (RMF) requirements and supporting artifacts.
• Strong analytical, organizational, interpersonal, written, and verbal communication skills.

Additional Information

Host Country Requirements

Candidates must satisfy all host country requirements to legally work in the host country, including the ability to obtain and maintain a host nation visa and host nation driver's license.

Work Environment

• Work environment is 95% indoors and 5% outdoors.
• Outdoor work environment may exceed temperatures of 100 degrees Fahrenheit. Candidate must be able to physically withstand extreme heat.

Physical Requirements

• Must be capable of lifting, pushing, and pulling items weighing up to 50 lbs.
• Must be capable of wearing Personal Protective Equipment (helmet and plated vest) weighing 25 to 40 lbs for extended periods of time.

Benefits

• Company-paid housing.
• Company-paid transportation.
• Completion bonus.
• Tuition reimbursement program.