Elastic SIEM Engineer - Remote, Enterprise Security

ASRC Federal; Quantico (VA); Hybrid; USD 150,000 - 165,000; Full time

Benefits offered by this job

Health care

Dental

Vision

Life Insurance

401k

Education Assistance

Paid Time Off

Job summary

ASRC Federal is seeking an Elastic SIEM Engineer to maintain and enhance enterprise-scale Elastic Stack security solutions in support of the DCSA program. The role involves designing detection rules, data ingestion pipelines across cloud and on‑prem sources, and creating dashboards to empower SOC analysts.

Required five years of Elastic experience, active Secret clearance, and DoD IAM/IAT Level II certifications.

Qualifications

• Five years direct Elastic engineering/administration experience.
• Active Secret clearance REQUIRED, eligible for TS/SCI.
• Bachelor’s degree in information security or related field.
• DoD 8140/8570 IAM/IAT Level II certifications required (e.g., CCNA Security, CySA+, GICSP, GSEC, Security+, CISM, CISSP).
• Two+ years AWS experience (highly desired).

Responsibilities

• Maintain enterprise Elastic Stack security solutions for national security systems.
• Design and implement detection rules, correlation searches, and analytics pipelines (Elasticsearch, Logstash, Kibana).
• Tune detection logic to reduce false positives and automate security workflows.
• Collaborate with SOC, engineering teams, and government stakeholders to enhance detection capabilities.
• Ensure compliance with NIST 800-53 and RMF through documentation and leadership.

Skills

Elastic Stack

AWS

Python

Bash

Networking

Troubleshooting

Education

Bachelor's degree in information security or related field

DoD 8140/8570 IAM/IAT Level II certification requirements

Tools

Elasticsearch

Logstash

Kibana

Elastic Security

AWS Cloud

Job description

ASRC Federal is seeking an Elastic SIEM Engineer to maintain and enhance enterprise-scale Elastic Stack security solutions in support of the DCSA program. The role involves designing detection rules, data ingestion pipelines across cloud and on‑prem sources, and creating dashboards to empower SOC analysts.

Required five years of Elastic experience, active Secret clearance, and DoD IAM/IAT Level II certifications.