Elastic Data Analytics Platform Engineer

Booz Allen Hamilton; Utah; On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking an Elastic Engineer to build and maintain a high-performing Elastic-based platform that aggregates logs from multiple systems into ECS-formatted documents. The role emphasizes creating Kibana dashboards, visualizations, and alerts for threat hunting, while ensuring deployment adheres to security requirements.

Qualified candidates will have 2+ years with Elastic Stack, strong regex/grok skills, and knowledge of NIST/FedRAMP; a Secret clearance is required along with

Qualifications

• 2+ years of experience with Elastic Stack (Elasticsearch, Logstash, Kibana).
• 2+ years building high-quality Kibana visualizations and dashboards.
• Experience with log pipelines and converting logs to ECS format.
• Experience with Logstash plugins, filters, regex, and grok patterns.
• Knowledge of TLS, mTLS, hashing, and PKI.
• Knowledge of NIST 800-53, FIPS, STIG, and FedRAMP.
• Secret clearance.
• HS diploma or GED.

Responsibilities

• Build a high performing system using Elastic to aggregate logs into a single common schema.
• Create quality visualizations and alerts for threat hunting and anomaly detection.
• Collaborate with vendors on deployment best practices and secure architecture.

Skills

Elastic Stack

Kibana visualizations

Log pipelines

Regular expressions

Grok patterns

TLS / mTLS / PKI

NIST 800-53 / FIPS / STIG / FedRAMP

Secret clearance

Education

HS diploma or GED

Tools

Docker

Kubernetes

Elastic Cloud on Kubernetes (ECK)

NiFi

Kafka

Confluent

Office 365

Teams

RDP / SSH / CLI

Job description

Booz Allen Hamilton is seeking an Elastic Engineer to build and maintain a high-performing Elastic-based platform that aggregates logs from multiple systems into ECS-formatted documents. The role emphasizes creating Kibana dashboards, visualizations, and alerts for threat hunting, while ensuring deployment adheres to security requirements.

Qualified candidates will have 2+ years with Elastic Stack, strong regex/grok skills, and knowledge of NIST/FedRAMP; a Secret clearance is required along with