Elastic Security & Log Analytics Engineer

Booz Allen Hamilton; Mechanicsburg (Cumberland County); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking an Elastic Stack Engineer to help clients aggregate logs using ECS and build high‑quality Kibana dashboards and alerts for threat hunting. The role emphasizes secure deployment and maintenance within designated security requirements.

You will collaborate with vendors and clients to ensure robust system architecture, contribute to incident detection, and support DoD/regulatory compliance while maintaining infrastructure. Secret clearance is required.

Qualifications

• 2+ years of experience with Elastic Stack (Elasticsearch, Logstash, Kibana) including installation, configuration, maintenance, upgrades, and troubleshooting.
• 2+ years of experience building high-quality Kibana visualizations and dashboards.
• Experience with log pipelines and interpreting logs to determine information, including converting raw logs into ECS formatted documents.
• Experience with Logstash plugins, filters, regular expressions, and grok patterns.
• Knowledge of cryptography protocols and standards, including TLS, mTLS, hashing algorithms, and PKI.
• Knowledge of federal compliance standards, including NIST 800-53, FIPS, STIG, and FedRAMP.
• Secret clearance.
• HS diploma or GED

Skills

Elastic Stack

Kibana Dashboards

Log Pipelines

Logstash

TLS

NIST 800-53

Security Clearance

Education

HS diploma or GED

Tools

Docker

Kubernetes

ECK

NiFi

Kafka

Confluent

Office 365

Teams

RDP

SSH

CLI

ILM

Job description

Booz Allen Hamilton is seeking an Elastic Stack Engineer to help clients aggregate logs using ECS and build high‑quality Kibana dashboards and alerts for threat hunting. The role emphasizes secure deployment and maintenance within designated security requirements.

You will collaborate with vendors and clients to ensure robust system architecture, contribute to incident detection, and support DoD/regulatory compliance while maintaining infrastructure. Secret clearance is required.