ArcSight Management Analyst (SIEM Engineer)

About the role

The ArcSight Management Analyst (also referred to as a Security Information and Event Management Engineer) provides operation and maintenance support for the Army SIEM environment. You will work with both Linux and Windows server platforms to ensure reliable data collection, storage, and analysis for cyber‑security operations.

Key responsibilities

• Implement, administer, and troubleshoot SIEM tools including Elasticsearch, Kibana, Beats and Logstash (ELK stack).
• Organise configuration repositories and track network configuration changes.
• Monitor compliance with cyber‑security policies and update related TTPs and SOPs.
• Install and manage Red Hat Enterprise Linux, Microsoft Windows Server, Confluent Kafka, Docker, Zookeeper and related components.
• Troubleshoot servers, infrastructure equipment and assess networking requirements.
• Participate in regular meetings to communicate system changes and project progress.
• Make independent decisions under pressure and support customers with security configuration needs.

Required profile

• Active Secret security clearance.
• At least one year of relevant experience in SIEM or cyber‑security operations.
• Ability to obtain and maintain host‑nation visa and driver’s license.
• Strong customer‑service orientation and ability to work in a fast‑paced, deadline‑driven environment.

Required skills

• Elasticsearch, Kibana, Beats, Logstash (ELK).
• Red Hat Enterprise Linux.
• Microsoft Windows Server.
• Confluent Kafka.
• Docker.
• Zookeeper.
• Network configuration management and server troubleshooting.

What we offer

• Company‑paid housing and transportation.
• Completion bonus.
• Tuition reimbursement program.