Elastic Security Engineer: ECS & Dashboards

Phase2 Technology; Colorado Springs (CO); Hybrid; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking an Elastic Engineer to design and operate a high-performing Elastic-based system that aggregates logs from multiple sources into a unified schema. You will craft ECS-formatted data, develop Kibana dashboards, and implement alerts for proactive threat hunting.

You will collaborate with the vendor to determine deployment best practices, while adhering to security requirements and DoD/regulatory standards.

Qualifications

• 2+ years with Elastic Stack (Elasticsearch, Logstash, Kibana).
• 2+ years building Kibana visualizations/dashboards.
• Experience converting raw logs to ECS formatted documents.
• Experience with Logstash plugins, filters, regex, and grok patterns.
• Knowledge of TLS, mTLS, hashing, PKI.
• Knowledge of NIST 800-53, FIPS, STIG, FedRAMP.
• Secret clearance required.
• HS diploma or GED.

Responsibilities

• Build a high-performing Elastic-based system aggregating logs into a single schema.
• Create quality Kibana visualizations and alerts for threat hunting.
• Maintain infrastructure and identify anomalies before they escalate; collaborate with vendor on deployment best practices within security requirements.

Skills

Elastic Stack

Kibana dashboards

Log pipelines

Regex / Grok

TLS / PKI

NIST / FedRAMP

Secret clearance

Education

HS diploma or GED

Tools

Docker

Kubernetes

ECK

NiFi

Kafka

Confluent

Job description

Booz Allen Hamilton is seeking an Elastic Engineer to design and operate a high-performing Elastic-based system that aggregates logs from multiple sources into a unified schema. You will craft ECS-formatted data, develop Kibana dashboards, and implement alerts for proactive threat hunting.

You will collaborate with the vendor to determine deployment best practices, while adhering to security requirements and DoD/regulatory standards.