Elastic Defense Engineer - EDR & Log Analytics

Booz Allen Hamilton; Hawaii; Hybrid; USD 87,000 - 198,000; Full time

Benefits offered by this job

Health benefits

Paid leave

Professional development

Tuition assistance

Work-life programs

Dependent care

Recognition awards

Job summary

Booz Allen Hamilton is seeking an Elastic Engineer to build high performing EDR workflows using Elastic Defend and Trellix. You will aggregate logs into a common schema, create ECS-formatted visualizations and alerts for threat hunting, and oversee deployment and maintenance of system architecture.

You will mentor teammates, apply advanced consulting skills, and work with vendors to implement best practices. A Secret clearance is required and a HS diploma or GED is accepted.

Qualifications

• Experience with Elastic Defend and Elastic Stack including installing, configuring, maintaining, upgrading, and troubleshooting these products.
• Experience with Trellix.
• Knowledge of cryptography protocols and standards, including TLS, mTLS, hashing algorithms, and PKI.
• Knowledge of federal compliance standards, including NIST 800-53, FIPS, STIG, and FedRAMP.
• Secret clearance.
• HS diploma or GED.

Responsibilities

• Build high performing Endpoint Detection and Response (EDR) processes using Elastic Defend and Trellix to aggregate logs into a single schema.
• Create quality visualizations and alerts in Kibana for threat hunting and incident response.
• Maintain system architecture, deploy within security requirements, and mentor team members.

Skills

Elastic Defend & Elastic Stack

Trellix

Cryptography protocols & standards

Federal compliance standards

Secret clearance

HS diploma or GED

Education

HS diploma or GED

Tools

Docker

Kubernetes

Elastic Cloud on Kubernetes (ECK)

NiFi

Kafka

Confluent

Office 365 & Teams

RDP/SSH/CLI tools

Job description

Booz Allen Hamilton is seeking an Elastic Engineer to build high performing EDR workflows using Elastic Defend and Trellix. You will aggregate logs into a common schema, create ECS-formatted visualizations and alerts for threat hunting, and oversee deployment and maintenance of system architecture.

You will mentor teammates, apply advanced consulting skills, and work with vendors to implement best practices. A Secret clearance is required and a HS diploma or GED is accepted.