Elastic Stack Threat Analytics Engineer

Booz Allen Hamilton; Columbus (OH); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking an Elastic Platform Engineer to build a high-performing Elastic-based system, visualizations, and secure log pipelines. The role emphasizes ECS formatting, threat hunting readiness, and collaboration with vendors on deployment within security requirements.

Required 2+ years with Elastic Stack, Kibana dashboards, and strong PKI/compliance knowledge; Secret clearance is required.

Qualifications

• 2+ years of Elastic Stack experience (Elasticsearch, Logstash, Kibana)
• 2+ years building Kibana visualizations and dashboards
• Experience with log pipelines and ECS-formatted logs
• Experience with Logstash plugins, filters, regular expressions, and grok patterns
• Knowledge of TLS, mTLS, hashing algorithms, and PKI
• Knowledge of federal compliance standards (NIST 800-53, FIPS, STIG, FedRAMP)
• Secret clearance
• HS diploma or GED

Responsibilities

• Design and implement Kibana dashboards and visualizations for threat hunting and analytics.
• Build and manage log pipelines; convert raw logs into ECS-formatted documents.

Skills

Elastic Stack

Kibana dashboards

Log pipelines

Logstash plugins

Grok patterns

PKI

NIST/FIPS/STIG FedRAMP

Secret clearance

Education

HS diploma or GED

Tools

Docker

Kubernetes

Elastic Cloud on Kubernetes (ECK)

NiFi

Kafka

Confluent

Office 365

Teams

RDP

SSH

CLI

Job description

Booz Allen Hamilton is seeking an Elastic Platform Engineer to build a high-performing Elastic-based system, visualizations, and secure log pipelines. The role emphasizes ECS formatting, threat hunting readiness, and collaboration with vendors on deployment within security requirements.

Required 2+ years with Elastic Stack, Kibana dashboards, and strong PKI/compliance knowledge; Secret clearance is required.