Elastic Stack Engineer: ECS-driven Logs & Threat Hunting

Booz Allen Hamilton; Fort Meade (MD); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton in Fort Meade, MD is seeking an Elastic Stack engineer to build high-performing log aggregation systems using ECS. You will implement ECS-formatted documents from diverse logs, and design Kibana dashboards to support threat hunting and incident response.

Work with vendors to optimize deployment under security requirements. A secret clearance is preferred; experience with DoD-style environments is a plus. Excellent collaboration and problem-solving are essential.

Qualifications

• 2+ years of experience with Elastic Stack, such as Elasticsearch, Logstash, and Kibana tools, including installing, configuring, maintaining, upgrading, and troubleshooting these products.
• 2+ years of experience building high-quality Kibana visualizations and dashboards.
• Experience with log pipelines and interpreting logs to determine information, including converting raw logs into ECS formatted documents.
• Experience with Logstash plugins, filters, regular expressions, and grok patterns.
• Knowledge of cryptography protocols and standards, including TLS, mTLS, hashing algorithms, and Public Key Infrastructure (PKI).
• Knowledge of federal compliance standards, including NIST 800-53, FIPS, STIG, and FedRAMP.
• Secret clearance
• HS diploma or GED

Responsibilities

• Aggregate logs from multiple systems using Elastic to a single common ECS-formatted schema.
• Create quality Kibana visualizations and alerts for threat hunting.
• Maintain and optimize infrastructure and deployments, collaborating with vendors on best practices.
• Interpret logs to extract meaningful information and support security operations.
• Ensure deployments meet designated security requirements and compliance standards.

Skills

Elastic Stack

Kibana dashboards

Logstash

ECS formatting

Threat hunting

Regex/Grok

TLS/mTLS/PKI

NIST 800-53/FIPS/STIG/FedRAMP

Secret clearance

Education

HS diploma or GED

Tools

Docker

Kubernetes

Elastic Cloud on Kubernetes (ECK)

NiFi

Kafka

Confluent

Logstash plugins

Grok patterns

Job description

Booz Allen Hamilton in Fort Meade, MD is seeking an Elastic Stack engineer to build high-performing log aggregation systems using ECS. You will implement ECS-formatted documents from diverse logs, and design Kibana dashboards to support threat hunting and incident response.

Work with vendors to optimize deployment under security requirements. A secret clearance is preferred; experience with DoD-style environments is a plus. Excellent collaboration and problem-solving are essential.