Elastic Stack Engineer – Threat Analytics & Dashboards

EverWatch; Maryland; On-site; USD 99,000 - 125,000; Full time

Job summary

EverWatch is seeking an Elastic Engineer to design and operate a scalable logging and analytics platform using Elastic Stack. You will develop ECS-formatted logs, build dashboards and alerts for threat hunting, and work with clients to ensure secure deployment aligned with DoD/IC requirements.

The role requires 2+ years with Elastic Stack, strong Kibana skills, and familiarity with federal standards like NIST/FIPS/STIG/FedRAMP.

Qualifications

• 2+ years of experience with Elastic Stack including Elasticsearch, Logstash and Kibana.
• 2+ years of building high-quality Kibana visualizations and dashboards.
• Experience with log pipelines and ECS formatted documents.
• Knowledge of cryptography, TLS, mTLS and PKI, and federal compliance standards.

Responsibilities

• Collaborate with clients to build a high performing system using Elastic to aggregate logs.
• Create ECS formatted fields, quality visualizations and alerts for threat hunting.
• Maintain infrastructure and deploy within designated security requirements.

Skills

Elastic Stack

Elasticsearch

Logstash

Kibana

ECS fields

TLS

mTLS

PKI

NIST 800-53

FIPS

STIG

FedRAMP

Secret clearance

HS Diploma or GED

DoD8570 IAT II

Docker

Kubernetes

Cribl

NiFi

Kafka

Office 365

Teams

RDP

SSH

Education

HS Diploma or GED

Tools

Docker

Kubernetes

Elastic Cloud on Kubernetes

Cribl

NiFi

Kafka

Office 365

Job description

EverWatch is seeking an Elastic Engineer to design and operate a scalable logging and analytics platform using Elastic Stack. You will develop ECS-formatted logs, build dashboards and alerts for threat hunting, and work with clients to ensure secure deployment aligned with DoD/IC requirements.

The role requires 2+ years with Elastic Stack, strong Kibana skills, and familiarity with federal standards like NIST/FIPS/STIG/FedRAMP.