Elastic Data Engineer

Jcssolutions; Adelphi (MD); Hybrid; USD 135,000 - 162,000; Full time

Benefits offered by this job

Health, dental, vision insurance

Life insurance

Disability insurance

PTO

401k with employer match

Professional Development Reimbursement

Job summary

JCS Solutions is seeking an Elastic Data Engineer to design, maintain, and optimize data ingestion and analytics in a DoD cybersecurity environment. You will manage Elastic Stack pipelines, integrate telemetry, improve data quality, and support dashboards, alerting, and incident response.

This hybrid role requires onsite collaboration several days monthly to meet business needs and strengthen the team. Candidates should have DoD clearance eligibility and robust Elasticsearch experience.

Qualifications

• BS with 4-8 years of relevant experience or MS with 2-6 years of experience.
• Active or obtainable DoD TS/SCI clearance.
• Experience designing and implementing Elastic Stack data pipelines for cybersecurity telemetry.
• Strong understanding of data models, schemas, and ETL/ELT processes.

Responsibilities

• Design and develop data pipelines for cybersecurity and telemetry data.
• Ingest, transform, normalize, and route structured and unstructured data from multiple sources.
• Create and maintain standardized data schemas, mappings, and data models.
• Parse log formats including JSON, XML, CSV, syslog, Windows Event Logs.
• Develop data quality controls to identify missing or duplicate records.
• Collaborate with analysts to support threat hunting, alerting, and incident response.

Skills

Data engineering

Troubleshooting

Documentation

Communication

Cybersecurity telemetry

Python

SQL

Education

Bachelor's degree

Master's degree

Tools

Elasticsearch

Logstash

Kibana

Elastic Agent

Beats

REST APIs

Git

Docker

Kubernetes

AWS

Job description

Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success!

Job Summary

JCS Solutions’ C5ISR Center CSSP Cloud Operations Team is seeking an Elastic Data Engineer to design, maintain, and optimize enterprise data‑ingestion and analytics capabilities within a Department of Defense cybersecurity environment. The engineer will manage Elastic Stack data pipelines, integrate cybersecurity and operational telemetry, improve data quality and platform performance, and support dashboards, alerting, threat detection, incident response, and compliance reporting.

This is a hybrid position requiring onsite attendance several days each month to support team collaboration, meetings, and business needs.

What’s in it for you:

• Join a premier technology firm specializing in innovative solutions.
• Be part of a collaborative, inclusive, and innovative work culture.
• Enjoy tremendous growth potential in a high‑performing team environment.
• A robust benefits package:
  • Health, dental, and vision insurance
  • Life insurance
  • Short‑and‑long term disability
  • Paid time off (PTO)
  • 401k retirement plan with employer match
  • Annual Professional Development Reimbursement Program
  • And more!

What you will do:

• Design and develop data pipelines for cybersecurity, cloud, network, endpoint, application, identity, and infrastructure telemetry.
• Collect, ingest, transform, normalize, enrich, and route structured and unstructured data from multiple enterprise sources.
• Create and maintain standardized data schemas, field mappings, naming conventions, and data models.
• Parse complex log formats including JSON, XML, CSV, syslog, Windows Event Logs, and custom application data.
• Develop data‑quality controls to identify missing, duplicated, malformed, delayed, or inconsistent records.
• Perform data validation, reconciliation, cleansing, deduplication, and enrichment.
• Map source data to Elastic Common Schema or other approved enterprise data standards.
• Build reusable parsing rules, transformation logic, lookup tables, and enrichment workflows.
• Integrate data from REST APIs, databases, message queues, cloud services, files, and third‑party security platforms.
• Support high‑volume, near‑real‑time data ingestion and event‑processing requirements.
• Analyze data flows to identify ingestion gaps, bottlenecks, field inconsistencies, and source‑system issues.
• Collaborate with cybersecurity analysts and detection engineers to ensure data supports threat hunting, alerting, incident response, and reporting use cases.
• Document data sources, schemas, transformations, lineage, dependencies, retention requirements, and onboarding procedures.
• Support data governance, metadata management, data classification, retention, and access‑control requirements.
• Use Python, SQL, PowerShell, Bash, or similar tools for data processing, automation, validation, and troubleshooting.
• Apply Git‑based version control and testing practices to data pipelines, schemas, and transformation logic.
• Troubleshoot data loss, timestamp issues, encoding problems, mapping conflicts, parsing failures, and ingestion delays.
• Work with cloud and infrastructure teams to onboard data sources.
• Maintain strong knowledge of cybersecurity telemetry, data engineering principles, ETL/ELT processes, APIs, and large‑scale event data.

What you will bring:

• Strong knowledge of Elasticsearch, Logstash, Kibana, Elastic Agent, Fleet, and Beats.
• Experience developing high‑volume logging or cybersecurity‑telemetry pipelines.
• Knowledge of Elasticsearch clusters, indices, shards, mappings, templates, and data streams.
• Experience with Logstash filters, ingest pipelines, JSON, XML, CSV, syslog, and Windows event data.
• Experience with Index Lifecycle Management, retention, rollover, and data‑tiering strategies.
• Linux administration and scripting experience using Python, PowerShell, or Bash.
• Experience with REST APIs, Git, networking, TLS, certificates, and access controls.
• Understanding security monitoring, threat detection, incident response, and vulnerability management.
• Strong troubleshooting, documentation, and communication skills.
• Requires a BS with 4-8 years of prior relevant experience orMaster’swith 2-6 years of prior relevant experience.
• Active or obtainable DOD TS/SCI clearance.

How will you wow us:

• Experience supporting SOC, CSSP, SIEM, or enterprise observability platform.
• Experience with Elastic Security, AWS, AWS GovCloud, Kafka, Docker, or Kubernetes.
• Familiarity with Zero Trust, RMF, DISA STIGs, and federal logging requirements.
• Elastic, AWS, Security+, GIAC, or CISSP certification.

JCS Solutions (JCS) is a premier technology firm providing innovative solutions and high‑quality services in defense, national security, and civilian sectors. JCS offers enterprise‑wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers’ mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities.

JCS is both a Great Place to Work and a Top Places to Work certified company.

Our employees embody our core values, and we are looking for others who do too!

• Customer Experience: Strive for excellence and delight our clients
• Innovation: Embrace creative thinking to enable continual growth and powerful solutions
• Accountability: Take ownership of and pride in our actions and service delivery
• Inspire: Be inspired to be your best self and have fun in the process
• Integrity: Do the right thing, the right way, every time!
• Stewardship: The careful and responsible management of something entrusted to our care.

At JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $135,000.00 - $162,000.00

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws.

NOTICE: Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team will only come from @JCSSolutions.com. We want to emphasize that we do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app.