Elastic Stack Engineer: Threat Hunting & Dashboards

Booz Allen Hamilton; San Antonio (TX); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking an Elastic Engineer to architect and deploy high-performing Elastic stacks for centralized log aggregation in San Antonio, TX. You will develop ECS-formatted data, create Kibana dashboards, and implement robust alerts to support threat hunting and infrastructure maintenance.

The role requires 2+ years with Elastic Stack, Kibana dashboards, and familiarity with secure deployment practices, including TLS/mTLS and NIST/FedRAMP standards. A Secret clearance is required.

Qualifications

• ,2+ years with Elastic Stack: Elasticsearch, Logstash, Kibana—install, config, maintenance, upgrades, troubleshooting
• 2+ years building Kibana dashboards
• Experience with log pipelines and ECS formatting
• Experience with Logstash plugins, filters, regex, grok
• Knowledge of cryptography protocols: TLS, mTLS, hashing, PKI
• Knowledge of NIST 800-53, FIPS, STIG, FedRAMP
• Secret clearance
• HS diploma or GED

Responsibilities

• Build high-performing systems using Elastic to aggregate logs into a single schema.
• Create quality visualizations and alerts for threat hunting.
• Collaborate with vendor on deployment best practices and maintain system architecture.

Skills

Elastic Stack

Kibana visualizations

Log pipelines

Logstash plugins & grok

TLS / PKI security

NIST / FedRAMP compliance

Secret clearance

HS diploma or GED

Education

HS diploma or GED

Tools

Docker/Kubernetes/ECK

NiFi / Kafka / Confluent

Office 365 / Teams

RDP / SSH / CLI

Linux/UNIX knowledge

Networking protocols

Zero Trust Architecture

Job description

Booz Allen Hamilton is seeking an Elastic Engineer to architect and deploy high-performing Elastic stacks for centralized log aggregation in San Antonio, TX. You will develop ECS-formatted data, create Kibana dashboards, and implement robust alerts to support threat hunting and infrastructure maintenance.

The role requires 2+ years with Elastic Stack, Kibana dashboards, and familiarity with secure deployment practices, including TLS/mTLS and NIST/FedRAMP standards. A Secret clearance is required.