Elastic Security Engineer: EDR & Threat Hunting

Booz Allen Hamilton; Hawaii; On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking an Elastic Engineer to help build and optimize Endpoint Detection and Response (EDR) capabilities using Elastic Defend and the Elastic Stack. You will aggregate logs across systems and develop high-quality visualizations and alerts to support threat hunting, with an emphasis on secure, compliant architectures.

Work with vendors to implement best practices, orchestrate system life cycles from requirements to retirement, and mentor team members.

Qualifications

• Experience with Elastic Defend and Elastic Stack including installing, configuring, maintaining, upgrading, and troubleshooting these products.
• Knowledge of cryptography protocols and standards, including TLS, mTLS, hashing algorithms, and Public Key Infrastructure (PKI)
• HS diploma or GED.

Responsibilities

• Develop and maintain Endpoint Detection and Response (EDR) processes and threat-hunting capabilities.
• Collaborate with vendors to determine best practices for deployment and maintenance of system architecture.
• Mentor and supervise team members and work with DoD-like security requirements.

Skills

Elastic Defend

Elastic Stack

Threat hunting

Kubernetes

Education

HS diploma or GED

Tools

Docker

Kubernetes

NiFi

Kafka

Confluent

Office 365

Teams

RDP

SSH

CLI

Elastic Cloud on Kubernetes (ECK)

Elasticsearch

Logstash

Kibana

Job description

Booz Allen Hamilton is seeking an Elastic Engineer to help build and optimize Endpoint Detection and Response (EDR) capabilities using Elastic Defend and the Elastic Stack. You will aggregate logs across systems and develop high-quality visualizations and alerts to support threat hunting, with an emphasis on secure, compliant architectures.

Work with vendors to implement best practices, orchestrate system life cycles from requirements to retirement, and mentor team members.