Elastic Engineer

About the role

This role supports a DoD Cybersecurity program and involves working within a multi-disciplined team to design, build, secure, maintain, optimize, and document multiple Elastic Stack Enterprise solutions.

Responsibilities

• Deploy, configure, and develop solutions using the Elastic Stack for security and logging use-cases.
• Perform continuous data normalization support functions.
• Contribute to the development of written technical deliverables such as SOPs and process workflows to optimize tool usage.
• Support internal engineering personnel and external customer requirements through infrastructure, data pipelines, and reporting automation.

Requirements

• Minimum Secret Clearance required
• Compliance with DoD 8140 / 8570 IAT Level II certification prior to start date
• At least 4 years' hands-on experience in deployment, configuration, and solution development using the Elastic Stack for security and logging use-cases.
• Specific experience with Elastic SIEM is a plus
• Demonstrated experience with the full Elastic Stack – Elasticsearch, Logstash, Kibana, Beats, Machine Learning, and REST API integration
• Demonstrated ability to utilize Ansible Playbooks

Desired Skills

• Experience integrating Elasticsearch with external systems (e.g., SOAR tools, Threat Intel Platforms)
• Strong experience with evaluating existing Elastic clusters, configuration parameters, indexing, search and query performance tuning, security, and cluster administration
• Experience integrating Elasticsearch with alternate authentication mechanisms such as SAML, LDAP, and PKI
• Experience with supporting the Elastic Stack in on-prem and SaaS environments including system monitoring and tuning
• Experience securing the Elastic Stack and hardening hosting environments
• Experience with developing in multiple languages (Python, Bash, PowerShell, Painless, etc.)
• Experience with the design and implementation of highly scalable solutions using the Elastic Stack
• Experience in developing data structures and data mapping from various sources to achieve data normalization using Elastic Common Schema
• Experience developing Logstash and/or Ingest Pipelines
• Experience developing custom visualizations and dashboards using Kibana
• Experience in developing custom reporting solutions using APIs that leverage Elasticsearch and ElastiCache
• Experience in end-to-end low-level design, development, administration, and delivery of Elasticsearch-based reporting solutions
• Experienced in Red Hat Enterprise Linux deployment and administration