Elastic Platform Engineer - ECS & Threat Hunting Dashboards

Booz Allen Hamilton; Hawaii; On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking an Elastic Engineer to help build and maintain a consolidated data analytics platform. You will aggregate logs from diverse systems into a common ECS schema and develop high-quality Kibana dashboards to support threat hunting and incident response.

You will work with vendors to set best practices for deployment and ensure compliance with security requirements. This role requires a Secret clearance and a strong background in Elastic technologies.

Qualifications

• 2+ years of experience with Elastic Stack (Elasticsearch, Logstash, Kibana)
• 2+ years of experience building Kibana visualizations and dashboards
• 2+ years of experience with log pipelines and ECS-formatted documents
• Experience with Logstash plugins, filters, regex, and grok patterns
• Knowledge of TLS, mTLS, hashing, and PKI
• Knowledge of NIST 800-53, FIPS, STIG, FedRAMP
• Secret clearance
• HS diploma or GED

Responsibilities

• Build a high performing system using Elastic to aggregate logs from multiple systems into a single ECS-formatted schema
• Create quality visualizations and alerts for threat hunting
• Maintain infrastructure and deploy within designated security requirements
• Collaborate with vendors to establish deployment and maintenance best practices

Skills

Elastic Stack

Kibana dashboards

Log pipelines

Logstash plugins

TLS / PKI

Security standards (NIST/FIPS/FedRAMP)

Security clearance

HS diploma

Education

HS diploma or GED

Tools

Docker

Kubernetes

NiFi

Kafka

Confluent

Office 365

RDP / SSH

Job description

Booz Allen Hamilton is seeking an Elastic Engineer to help build and maintain a consolidated data analytics platform. You will aggregate logs from diverse systems into a common ECS schema and develop high-quality Kibana dashboards to support threat hunting and incident response.

You will work with vendors to set best practices for deployment and ensure compliance with security requirements. This role requires a Secret clearance and a strong background in Elastic technologies.