Elastic Security Engineer: Threat Hunting & ECS

Booz Allen Hamilton; Utah; On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking an Elastic Engineer in Utah to build a high-performing system that aggregates logs from multiple sources into a single ECS-formatted schema. You will create quality Kibana dashboards, visualizations, and alerts to aid threat hunting and proactive operations.

Collaborate with vendors to implement best practices for deployment and ongoing maintenance within security requirements; 2+ years of Elastic Stack experience and a Secret clearance are required.

Qualifications

• 2+ years of experience with Elastic Stack, such as Elasticsearch, Logstash, and Kibana, including installation, configuration, maintenance, upgrades, and troubleshooting.
• 2+ years of experience building Kibana visualizations and dashboards.
• Experience with log pipelines and interpreting logs to ECS formatted documents.
• Experience with Logstash plugins, filters, regular expressions, and grok patterns.
• Knowledge of cryptography protocols and standards, including TLS, mTLS, hashing algorithms, and PKI.
• Knowledge of federal compliance standards, including NIST 800-53, FIPS, STIG, and FedRAMP.
• Secret clearance and HS diploma or GED.

Skills

Elastic Stack

Kibana dashboards

Logstash

Grok patterns

TLS/mTLS/PKI

NIST/FIPS/STIG/FedRAMP

Secret clearance

Education

HS diploma or GED

Tools

Elasticsearch

Logstash

Kibana

Docker

Kubernetes

ECK (Elastic Cloud on Kubernetes)

NiFi

Kafka

Job description

Booz Allen Hamilton is seeking an Elastic Engineer in Utah to build a high-performing system that aggregates logs from multiple sources into a single ECS-formatted schema. You will create quality Kibana dashboards, visualizations, and alerts to aid threat hunting and proactive operations.

Collaborate with vendors to implement best practices for deployment and ongoing maintenance within security requirements; 2+ years of Elastic Stack experience and a Secret clearance are required.