Elastic Platform Engineer - Logs & Threat Analytics

Booz Allen Hamilton; Fort Meade (MD); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking a skilled Elastic Stack engineer to aggregate logs into a common ECS schema and build powerful Kibana dashboards for threat hunting. You will collaborate with the team to deploy within stringent security requirements, maintaining infrastructure across Docker/Kubernetes environments.

The role emphasizes developing mission-ready analytics with ECS formatting, logs pipelines, and integration with enterprise security standards.

Qualifications

• 2+ years of Elastic Stack experience (Elasticsearch, Logstash, Kibana) and deployment/maintenance.
• 2+ years building Kibana visualizations and dashboards.
• Experience with log pipelines and interpreting logs to ECS formatted documents.
• Experience with Logstash plugins, filters, regular expressions, and grok patterns.
• Knowledge of TLS, mTLS, hashing algorithms, and PKI.
• Knowledge of NIST 800-53, FIPS, STIG, and FedRAMP.
• Secret clearance.
• HS diploma or GED.

Responsibilities

• Build a high performing Elastic-based system to aggregate logs into a single ECS-formatted schema.
• Create quality Kibana visualizations and alerts for threat hunting.
• Work with vendor to determine best practices for deployment and maintenance within security requirements.

Education

HS diploma or GED

Tools

Elasticsearch

Logstash

Kibana

Docker

Kubernetes

Elastic Cloud on Kubernetes (ECK)

RDP

SSH

CLI

Job description

Booz Allen Hamilton is seeking a skilled Elastic Stack engineer to aggregate logs into a common ECS schema and build powerful Kibana dashboards for threat hunting. You will collaborate with the team to deploy within stringent security requirements, maintaining infrastructure across Docker/Kubernetes environments.

The role emphasizes developing mission-ready analytics with ECS formatting, logs pipelines, and integration with enterprise security standards.