Elastic Security Engineer: Threat Hunting & ECS

Booz Allen Hamilton; Utah; Sur place; USD 87 000 - 198 000; Plein temps

Résumé du poste

Booz Allen Hamilton is seeking an Elastic Engineer in Utah to build a high-performing system that aggregates logs from multiple sources into a single ECS-formatted schema. You will create quality Kibana dashboards, visualizations, and alerts to aid threat hunting and proactive operations.

Collaborate with vendors to implement best practices for deployment and ongoing maintenance within security requirements; 2+ years of Elastic Stack experience and a Secret clearance are required.

Qualifications

• 2+ years of experience with Elastic Stack, such as Elasticsearch, Logstash, and Kibana, including installation, configuration, maintenance, upgrades, and troubleshooting.
• 2+ years of experience building Kibana visualizations and dashboards.
• Experience with log pipelines and interpreting logs to ECS formatted documents.
• Experience with Logstash plugins, filters, regular expressions, and grok patterns.
• Knowledge of cryptography protocols and standards, including TLS, mTLS, hashing algorithms, and PKI.
• Knowledge of federal compliance standards, including NIST 800-53, FIPS, STIG, and FedRAMP.
• Secret clearance and HS diploma or GED.

Connaissances

Elastic Stack

Kibana dashboards

Logstash

Grok patterns

TLS/mTLS/PKI

NIST/FIPS/STIG/FedRAMP

Secret clearance

Formation

HS diploma or GED

Outils

Elasticsearch

Logstash

Kibana

Docker

Kubernetes

ECK (Elastic Cloud on Kubernetes)

NiFi

Kafka

Description du poste

Booz Allen Hamilton is seeking an Elastic Engineer in Utah to build a high-performing system that aggregates logs from multiple sources into a single ECS-formatted schema. You will create quality Kibana dashboards, visualizations, and alerts to aid threat hunting and proactive operations.

Collaborate with vendors to implement best practices for deployment and ongoing maintenance within security requirements; 2+ years of Elastic Stack experience and a Secret clearance are required.