Cyber Security Engineer - Elasticsearch & SIEM Expert (TS/SCI)

Selecto Vinos; Hampton (VA); On-site; USD 90,300 - 189,600; Full time

Job summary

CACI is seeking a Cyber Security Engineer (Elastic SME) in the Hampton, VA area to maintain and develop our Elasticsearch cluster, ensuring health, status, and security monitoring across distributed systems.

The role involves deploying the ELK stack, diagnosing cluster issues, and building dashboards. Strong Linux administration, SIEM experience, and knowledge of security best practices are required. Some travel and 24/7 operations may be involved.

Qualifications

• Bachelor's degree in IS Technology, Computer Science, or related field (negotiable with equivalent experience)
• Minimum of 7 years of related experience
• DOD 8140 (8570) IAT Level II (Security+ or equivalent)

Responsibilities

• Deploy, optimize, and manage the ELK Stack (Elasticsearch, Logstash, Kibana) to support scalable log aggregation, real-time analytics, and observability across distributed systems.
• Diagnose and resolve Elasticsearch cluster health and performance anomalies across multi-node deployments.
• Deliver advanced technical support to uphold the confidentiality, integrity, and availability of the AF DCGS.
• Create custom Kibana dashboards and visualizations to provide insights into data trends.
• Utilize extensive understanding of Linux command line administration.
• Configure syslog, audit.d, and Windows audit policies.
• Perform server rebuilds, deployments, and parser customization.
• Apply knowledge of common enterprise security devices and tools.
• Utilize scripting languages and configuration management tools (e.g., Ansible, Puppet).
• Manage tasks using a ticketing system.
• Administer and troubleshoot Microsoft Windows and Linux operating systems in enterprise environments.

Skills

Elasticsearch

Kibana

Logstash

Linux administration

Ansible

Puppet

SIEM

Scripting

Windows auditing

Network protocols

Education

Bachelor's degree in IS Technology/Computer Science or related field

Tools

Ansible

Puppet

SIEM tools

Job description

CACI is seeking a Cyber Security Engineer (Elastic SME) in the Hampton, VA area to maintain and develop our Elasticsearch cluster, ensuring health, status, and security monitoring across distributed systems.

The role involves deploying the ELK stack, diagnosing cluster issues, and building dashboards. Strong Linux administration, SIEM experience, and knowledge of security best practices are required. Some travel and 24/7 operations may be involved.