Elastic Stack Engineer: ECS & Threat Visualization

Booz Allen Hamilton; Colorado Springs (CO); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking an Elastic Engineer to design and implement scalable logging systems using Elasticsearch, Logstash, and Kibana. You will build ECS-formatted data pipelines, create meaningful dashboards, and implement alerts to support threat hunting and proactive monitoring.

The role requires 2+ years with Elastic Stack, Kibana dashboards, and log pipelines, plus a Secret clearance. You’ll collaborate with vendors and work within approved security boundaries to deploy robust

Qualifications

• 2+ years of experience with Elastic Stack such as Elasticsearch, Logstash, and Kibana tools, including installing, configuring, maintaining, upgrading, and troubleshooting these products.
• 2+ years of experience building high-quality Kibana visualizations and dashboards.
• Experience with log pipelines and interpreting logs to determine information, including converting raw logs into ECS formatted documents.
• Experience with Logstash plugins, filters, regular expressions, and grok patterns.
• Knowledge of cryptography protocols and standards, including TLS, mTLS, hashing algorithms, and Public Key Infrastructure (PKI).
• Knowledge of federal compliance standards, including NIST 800-53, FIPS, STIG, and FedRAMP.
• Secret clearance
• HS diploma or GED

Responsibilities

• Build a high performing system using Elastic to aggregate logs from many systems into a single common schema.
• Use Elastic Common Schema (ECS) formatted fields, create quality visualizations and alerts for threat hunting.
• Maintain infrastructure and identify problems or anomalous behavior before they become a larger issue and can be actioned on.
• Work with the vendor to determine best practices for deployment and maintenance of system architecture and deploy within designated security requirements.

Skills

Elastic Stack

Kibana

Logstash

ECS formatting

Grok/Regex

PKI/TLS/mTLS

FIS/FedRAMP/NIST

Secret clearance

HS diploma or GED

Education

HS diploma or GED

Tools

Docker

Kubernetes

NiFi

Kafka

Confluent

Job description

Booz Allen Hamilton is seeking an Elastic Engineer to design and implement scalable logging systems using Elasticsearch, Logstash, and Kibana. You will build ECS-formatted data pipelines, create meaningful dashboards, and implement alerts to support threat hunting and proactive monitoring.

The role requires 2+ years with Elastic Stack, Kibana dashboards, and log pipelines, plus a Secret clearance. You’ll collaborate with vendors and work within approved security boundaries to deploy robust