Elasticsearch Engineer *No C2C*

TEKsystems; Lincoln (MA); On-site; USD 120,000 - 250,000; Full time

Benefits offered by this job

Full benefits

401K

Vacation

Job summary

TEKsystems is seeking an expert-level cybersecurity data engineer to design, implement, and maintain systems for automating complex cyber defense activities in Lincoln, MA. You will work with Elastic Stack components, build dashboards, and optimize log pipelines for security operations in government environments.

Qualifications include 5+ years with Elastic Stack, ECS mapping, and experience with SOC/SIEM workflows. On-site role with full benefits and potential for AWS and DoD-related projects.

Qualifications

• 5+ years of experience administering Elastic Stack, including Elasticsearch, Kibana, Logstash, Beats, or Fleet.
• Experience managing Elasticsearch index lifecycle policies, index templates, and data streams at scale, and building Kibana dashboards, visualizations, and lens-based analytics for security operations.
• Experience with Elastic Security detection rules, alerts, and case management workflows.
• Experience with log ingestion pipeline design, including parsing, enrichment, and normalization across heterogeneous log sources such as network, endpoint, identity, and cloud.
• Experience with Elastic Common Schema (ECS) and mapping non-standard log sources into ECS-compliant fields.
• Experience working in government cybersecurity environments such as SOC, SIEM operations, or defensive cyber.
• Experience optimizing log collections from AWS platform, endpoints, and network devices.
• Knowledge of AI/ML concepts as applied to security analytics such as anomaly detection, behavioral baselining, or threat scoring.
• Ability to obtain a Secret clearance
• Bachelors degree

Skills

Elastic Stack

Elasticsearch

Kibana

Logstash

Beats

Fleet

Security operations

Log ingestion pipelines

Elastic Common Schema (ECS)

DoD experience

Clearance

Bachelor's degree

Education

Bachelor's degree

Tools

Kubernetes

Elastic AI/ML

Job description

Description

Designs, implements, integrates, and maintains systems and tools to automate complex cyber activities. Applies leading-edge principles, theories, and concepts. Contributes to the development of new principles and concepts. Works on unusually complex problems and provides highly innovative solutions. Operates with substantial latitude for unreviewed action or decision. Mentors or supervises employees in both company and technical competencies.

Qualifications

• 5+ years of experience administering Elastic Stack, including Elasticsearch, Kibana, Logstash, Beats, or Fleet
• Experience managing Elasticsearch index lifecycle policies, index templates, and data streams at scale, and building Kibana dashboards, visualizations, and lens-based analytics for security operations
• Experience with Elastic Security detection rules, alerts, and case management workflows
• Experience with log ingestion pipeline design, including parsing, enrichment, and normalization across heterogeneous log sources such as network, endpoint, identity, and cloud
• Experience with Elastic Common Schema (ECS) and mapping non-standard log sources into ECS-compliant fields
• Experience working in government cybersecurity environments such as SOC, SIEM operations, or defensive cyber
• Experience optimizing log collections from AWS platform, endpoints, and network devices
• Knowledge of AI/ML concepts as applied to security analytics such as anomaly detection, behavioral baselining, or threat scoring
• Ability to obtain a Secret clearance
• Bachelors degree

Nice to Have Skills

• Experience working in an agile working environment
• Experience working with DoD clients
• Experience with Elastic's ML jobs, including for User and Entity Behavior Analytics (UEBA), rare process detection, or anomalous login patterns
• Experience with Elastic AI Assistant or integration of LLMs into Elastic Security workflows such as natural language querying and alert triage assistance
• Experience building or fine-tuning ML models outside Elastic, including Python, scikit-learn, and PyTorch, for security use cases such as threat detection or lateral movement scoring
• Experience with Elastic Agent fleet management at scale, including custom integrations and policy management
• Experience with cross-domain data flows and working in multi-classification environments such as IL4, IL5, or IL6
• Experience with ES|QL or EQL for advanced threat hunting and detection-as-code workflows
• Kubernetes Certification such as Kubernetes and Cloud Native Certification or Kubernetes Application Developer Certification

Skills

Elk stack, Elasticsearch, kibana, aws

Top Skills Details: Elk stack,Elasticsearch,kibana,aws

Experience Level

Expert Level

Job Type & Location

This is a Permanent position based out of Lincoln, MA.

Pay And Benefits

The pay range for this position is $120000.00 - $250000.00/yr.
Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.
see document via email. Full benefits, 401K, vacation

Workplace Type

This is a fully onsite position in Lincoln,MA.

Application Deadline

This position is anticipated to close on Oct 19, 2026.

About TEKsystems

We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

About TEKsystems And TEKsystems Global Services

Were a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. Were a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. Were strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. Were building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

San Francisco Fair Chance Ordinance

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Massachusetts Lie Detector

Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Use of Artificial Intelligence (AI)

Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.