Elastic Security Engineer – SIEM (Remote, DoD)

SERVISS LLC; United States; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health, vision, dental, life insurance

Equity Participation Program

Annual performance bonuses

Job summary

SERVISS LLC is seeking an Elastic Security Engineer to support a Federal DoD SIEM program. This hands-on role designs, builds, secures, maintains, and documents Elastic Stack solutions (Elasticsearch, Logstash, Kibana, Beats, ML) deployed globally in a DoD environment, with automation support using Ansible.

You will perform continuous data-normalization and deliver SOPs/workflows to optimize tool usage, supporting internal engineering personnel and external customer requirements.

Qualifications

• Active Top Secret security clearance and US citizenship.
• DoD 8140 / 8570 IAT Level II certification prior to start date.
• 4+ years of hands-on Elastic Stack deployment, configuration and development for security/logging use cases.
• Experience with Elasticsearch, Logstash, Kibana, Beats, Machine Learning, and REST API integration.
• Experience using Ansible playbooks.

Responsibilities

• Design, build, secure, maintain, optimize, and document Elastic Stack solutions for a Federal DoD environment.
• Automate deployment and configuration using Ansible playbooks.
• Perform data normalization across diverse data sources and build data pipelines.
• Develop reporting automation and SOPs/workflows to optimize tool usage.
• Engage with engineering teams and customer stakeholders to deliver capabilities.

Skills

Elastic Stack

Ansible

REST APIs

Python

Kibana

Security clearance

Tools

Red Hat Enterprise Linux

Job description

SERVISS LLC is seeking an Elastic Security Engineer to support a Federal DoD SIEM program. This hands-on role designs, builds, secures, maintains, and documents Elastic Stack solutions (Elasticsearch, Logstash, Kibana, Beats, ML) deployed globally in a DoD environment, with automation support using Ansible.

You will perform continuous data-normalization and deliver SOPs/workflows to optimize tool usage, supporting internal engineering personnel and external customer requirements.