Elastic Stack Engineer: ECS & Threat Analytics

Booz Allen Hamilton; Fort Meade (MD); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton in Fort Meade, MD seeks an Elastic Engineer to help build a high performing system that aggregates logs from many systems into a single common ECS schema. You will design ECS-formatted outputs and visualizations to support threat hunting and monitoring.

The role requires Elastic Stack expertise, Kibana visualization skills, and a strong understanding of log pipelines, security standards, and DoD/regulatory environments.

Qualifications

• 2+ years of experience with Elastic Stack, such as Elasticsearch, Logstash, and Kibana tools, including installing, configuring, maintaining, upgrading, and troubleshooting these products
• 2+ years of experience building high-quality Kibana visualizations and dashboards
• Experience with log pipelines and interpreting logs to determine information, including converting raw logs into ECS formatted documents
• Experience with Logstash plugins, filters, regular expressions, and grok patterns
• Knowledge of cryptography protocols and standards, including TLS, mTLS, hashing algorithms, and Public Key Infrastructure (PKI)
• Knowledge of federal compliance standards, including NIST 800-53, FIPS, STIG, and FedRAMP
• HS diploma or GED

Responsibilities

• Aggregate logs from multiple systems into a single common ECS schema and create ECS-formatted outputs
• Develop high-quality Kibana dashboards and visualizations for threat detection and monitoring
• Design and maintain log pipelines, including Grok patterns and Logstash filters
• Work with vendors to implement best practices for deployment and secure system architecture

Skills

Elastic Stack experience

Kibana visualizations

Log pipelines

Logstash plugins

TLS/mTLS/PKI

NIST/ FedRAMP

HS diploma or GED

Education

HS diploma or GED

Tools

Docker

Kubernetes

Elastic Cloud on Kubernetes (ECK)

NiFi

Kafka

Confluent

Office 365 / Teams

RDP/Web UI/SSH/CLI

Linux/Unix

Job description

Booz Allen Hamilton in Fort Meade, MD seeks an Elastic Engineer to help build a high performing system that aggregates logs from many systems into a single common ECS schema. You will design ECS-formatted outputs and visualizations to support threat hunting and monitoring.

The role requires Elastic Stack expertise, Kibana visualization skills, and a strong understanding of log pipelines, security standards, and DoD/regulatory environments.