Elastic Stack Engineer — Threat Hunting & Dashboards

Booz Allen Hamilton

Colorado Springs (CO)

On-site

USD 87,000 - 198,000

Full time

5 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Booz Allen Hamilton in Colorado Springs seeks an Elastic Engineer to join the Consolidated Data Analytics Platform. You will build a high performing system using Elastic to aggregate logs from many systems into a single ECS-formatted schema and create quality visualizations and alerts for threat hunting and rapid response.

Collaborate with clients and peers, deploying within security requirements and aligning with federal standards such as NIST 800-53 and FedRAMP.

Qualifications

2+ years of experience with Elastic Stack including Elasticsearch, Logstash and Kibana
2+ years building Kibana visualizations and dashboards
Experience with log pipelines and interpreting logs into ECS formatted documents
Experience with Logstash plugins, filters, regex, and grok patterns
Knowledge of cryptography protocols and standards (TLS, mTLS, hashing, PKI)
Knowledge of federal compliance standards (NIST 800-53, FIPS, STIG, FedRAMP)
Secret clearance
HS diploma or GED

Responsibilities

Build a high performing system using Elastic to aggregate logs from many systems into a single ECS schema.
Create quality visualizations and alerts for analyst threat hunting and rapid actioning of issues.
Collaborate with vendors to determine best practices for deployment and maintenance of system architecture.
Deploy within designated security requirements and ensure ongoing maintenance and tuning.