CSRA

• Supports the operations and maintenance of ArcSight ESM, ArcSight Logger, and ArcSight Connector appliances, and other security tools such as network IPS.
• Performs administration, management, configuration, and testing activities related to ArcSight.
• Maintains the application and appliances in accordance with DoD and Army security directives.
• Ability to develop ArcSight ESM content, such as rules, filters, channels, and notifications.
• Teach junior SOC analysts to create ArcSight ESM content and security tool maintenance.
• Define, design and develop system requirements.  Define system support requirements to include monitoring, capacity, staffing and patching/updating.
• Analyze and resolve program support deficiencies.
• Conducts independent technical investigations in systems design.

The Senior Cyber Security Engineer responsibilities include:

• Install, configure, and maintain ArcSight ESM per Army build guides and instructions. Participate in weekly ArcSight SEIM meetings with other Army organizations.
• Manage and maintain the Red Hat Enterprise Linux operating system.
• Coordinate with the US Army to ensure lessons learned and content from other ArcSight instances are incorporated into the ArcSight system.
• Mentors junior Cyber Security Engineers, ensuring they have required knowledge and training and familiarity with specific Agency Security requirements and processes.
• Participates in network and systems design to ensure implementation of appropriate systems security policies.

Qualifications

• Security Clearance:  Candidate must have an active DoD Secret Security Clearance.  Interim Secret clearance may be considered for qualified candidates.
• Years Of Experience: 6 – 9 years
• Education:  Bachelors’ degree required.  Candidates with additional work experience may be considered in lieu of degree.  Masters’ degree highly desirable.
• Certifications:
  • Individual must obtain ITILv3 Foundations and Security+ certification within 45 days of start date.
  • Must have CNDSP Infrastructure Support or CNDSP Incident responder certification: SSCP, CEH, GCIH, CSIH, or GCFA.

This position requires an innovative self-starter. Candidate must be willing to ask for help when needed and push their comfort zone to learn new technologies and skills. The candidate must be able to take high-level direction, apply lessons learned and job knowledge to the task, and share that knowledge with other members of the team.