Elastic Stack Engineer – Threat Analytics & Dashboards

Everwatch; Corridor North (MD); On-site; USD 99,187 - 125,361; Full time

Job summary

EverWatch is seeking an Elastic Engineer to design and operate a scalable Elastic Stack platform. You will integrate logs from multiple systems into a unified ECS schema, build dashboards and alerts for threat hunting, and collaborate with the vendor to secure deployment and ongoing maintenance in a compliant environment.

Qualification highlights include 2+ years with Elastic Stack, Kibana visualization, log pipelines, and DoD8570 IAT II certification.

Qualifications

• 2+ years of experience with Elastic Stack (Elasticsearch, Logstash, Kibana) including install, configure, maintain, upgrade, and troubleshoot.
• 2+ years building high-quality Kibana visualizations and dashboards.
• Experience with log pipelines and interpreting logs to ECS formatted documents.
• Experience with Logstash plugins, filters, regular expressions, and grok patterns.
• Knowledge of TLS, mTLS, hashing algorithms, and PKI.
• Knowledge of NIST 800-53, FIPS, STIG, and FedRAMP.
• Secret clearance.
• HS Diploma or GED.
• DoD8570 IAT II compliant Certification (e.g., Security+, CCNA Security, GSEC)

Responsibilities

• Work with clients and peers to build a high performing system using Elastic to aggregate logs from many systems into a single common schema. Use ECS formatted fields, create quality visualizations and alerts that analysts can use for threat hunting, maintain infrastructure, and identify problems or anomalous behavior before they become a larger issue and can be actioned on.
• Join us. The world can’t wait.

Job description

EverWatch is seeking an Elastic Engineer to design and operate a scalable Elastic Stack platform. You will integrate logs from multiple systems into a unified ECS schema, build dashboards and alerts for threat hunting, and collaborate with the vendor to secure deployment and ongoing maintenance in a compliant environment.

Qualification highlights include 2+ years with Elastic Stack, Kibana visualization, log pipelines, and DoD8570 IAT II certification.