Elastic Stack Threat Analytics Engineer

Booz Allen Hamilton

Scott Air Force Base (IL)

On-site

USD 87,000 - 198,000

Full time

5 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Booz Allen Hamilton is seeking an Elastic Engineer to build a high performing system that aggregates logs into a single ECS-formatted schema. You will develop quality Kibana dashboards and alerts to aid threat hunting, while maintaining the infrastructure under strict security requirements.

The role requires hands-on experience with Elasticsearch, Logstash, Kibana, and related tooling, plus a Secret clearance.

Qualifications

2+ years of Elastic Stack experience including Elasticsearch, Logstash, and Kibana.
2+ years building high-quality Kibana visualizations and dashboards.
Experience with log pipelines and converting raw logs into ECS formatted documents.
Experience with Logstash plugins, filters, grok patterns.
Knowledge of TLS, mTLS, hashing, and PKI.
Familiarity with NIST 800-53, FIPS, STIG, and FedRAMP.
Secret clearance is required.
HS diploma or GED is required.

Responsibilities

Design and implement high-performing Elastic-based systems to centralize logs.
Create quality visualizations and alerts for threat hunting and incident response.
Collaborate with vendors to establish deployment best practices and secure architecture.
Maintain infrastructure and identify anomalous behavior before issues arise.