Elastic Data Engineer for Cybersecurity & Observability

JCS Solutions LLC; Maryland; On-site; USD 135,000 - 162,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Life insurance

Short- and long-term disability

Paid time off (PTO)

401k with employer match

Professional Development Reimbursement

Job summary

JCS Solutions LLC is seeking an Elastic Data Engineer to design, maintain, and optimize data ingestion, analytics, and monitoring using the Elastic Stack for a DoD environment in Maryland. You will work with telemetry from multiple sources to drive threat detection, incident response, and compliance reporting.

The role requires TS/SCI clearance, experience with Elastic Stack, and strong Python/SQL skills. Expect collaboration with cybersecurity and infrastructure teams, and opportunities for

Qualifications

• Design and maintain data pipelines for cybersecurity, cloud, network, endpoint, application, identity, and infrastructure telemetry
• Collect, ingest, transform, normalize, enrich, and route structured and unstructured data from enterprise sources
• Develop and maintain data schemas, mappings, standards, and models, including ECS alignment
• Parse and process logs in JSON, XML, CSV, syslog, Windows Event Logs, and custom data
• Implement data quality controls, validation, cleansing, reconciliation, deduplication, and enrichment
• Build reusable parsing, transformation, and enrichment workflows and integrate data from APIs, databases, cloud services, queues, files, and security platforms
• Support high-volume, near-real-time data ingestion and event processing
• Analyze data flows to identify gaps and bottlenecks
• Collaborate with cybersecurity analysts and infra teams to onboard data sources and support threat hunting and reporting
• Document data sources, schemas, lineage, dependencies, governance, retention, and onboarding procedures
• Use Python, SQL, PowerShell, Bash, Git, and testing to support data engineering
• Maintain expertise in cybersecurity telemetry and large-scale event-data management

Responsibilities

• Design and maintain data pipelines for cybersecurity telemetry
• Ingest and route data from multiple enterprise sources
• Align data schemas to Elastic Common Schema (ECS)
• Parse diverse log formats (JSON, XML, CSV, syslog, Windows logs)
• Enforce data quality and enrichment processes
• Create reusable parsing and transformation workflows
• Support near-real-time data ingestion and troubleshoot data-quality issues
• Collaborate with analysts and infra teams for threat detection and reporting
• Document data sources, lineage, and onboarding procedures
• Apply scripting (Python, PowerShell, Bash) and Git for validation and automation

Skills

Elastic Stack

Data pipelines

Cybersecurity telemetry

Python

SQL

PowerShell

Bash

REST APIs

Git

Troubleshooting

TS/SCI clearance

Education

BS degree with 4-8 years of relevant experience

MS degree with 2-6 years of relevant experience

Tools

Elasticsearch

Logstash

Kibana

Elastic Agent

Fleet

Beats

AWS

Kafka

Docker

Kubernetes

Git

Job description

JCS Solutions LLC is seeking an Elastic Data Engineer to design, maintain, and optimize data ingestion, analytics, and monitoring using the Elastic Stack for a DoD environment in Maryland. You will work with telemetry from multiple sources to drive threat detection, incident response, and compliance reporting.

The role requires TS/SCI clearance, experience with Elastic Stack, and strong Python/SQL skills. Expect collaboration with cybersecurity and infrastructure teams, and opportunities for