Junior Cybersecurity Engineer âEUR\" Elastic SIEM

Maximus; San Antonio (TX); On-site; USD 65,000 - 95,000; Full time

Job summary

Maximus is seeking a Junior Cybersecurity Engineer – Elastic SIEM to join our on-site team in San Antonio, TX. The role requires active TS/SCI clearance and involves administering Elastic Stack across NIPRNet, SIPRNet, and JWICS environments, monitoring SIEM health, and collaborating with cyber operators.

The ideal candidate has a related degree, hands-on Elastic Stack experience, and a willingness to work in a fast-paced DoD-focused setting with adherence to DoD and USAF policies.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience).
• 3+ years of hands-on cybersecurity engineering experience.
• Active Top Secret / SCI (TS/SCI) security clearance.
• Experience with Elastic Stack and SIEM operations.
• Familiarity with DCO concepts, CSSP operations, and defensive cyber frameworks.

Responsibilities

• Perform routine tasks under the guidance and review of experienced engineers, following established procedures.
• Assist with administering, operating, and sustaining the Elastic SIEM platform across NIPRNet, SIPRNet, and JWICS environments.
• Monitor SIEM health, support capacity planning, and troubleshoot routine platform issues using runbooks; escalate outages and complex degradations.
• Develop, tune, and maintain detection rules, alerts, dashboards, and visualizations in Elastic.

Skills

Scripting/Automation

Threat detection

Team collaboration

Geographic security policy

Education

Bachelor's degree in Cybersecurity, CS, IT, or related field

Tools

Elastic Stack

Kibana

Logstash

Beats/Elastic Agent

Palo Alto Cortex XSOAR

Kubernetes

AWS GovCloud

MITRE ATT&CK

Python

Bash

KQL/EQL

Job description

Junior Cybersecurity Engineer – Elastic SIEM

Date

Thursday, September 24, 2026

City

San Antonio

State

TX

Country

United States

Working time

Full-time

Description & Requirements

Maximus is currently seeking a Junior Cybersecurity Engineer – Elastic SIEM.

This role is onsite, 5 days a week, in San Antonio, TX and requires an active Top Secret / SCI (TS/SCI) security clearance.

Job-Specific Essential Duties and Responsibilities

• Perform routine tasks under the guidance and review of experienced engineers, following established procedures.
• Assist with administering, operating, and sustaining the Elastic SIEM platform (Elasticsearch, Kibana, Logstash, Beats/Elastic Agent) across NIPRNet, SIPRNet, and JWICS environments.
• Monitor SIEM health, support capacity planning, and troubleshoot routine platform issues using runbooks; escalated outages and complex degradations in accordance with defined SLAs.
• Assist with developing, tuning, and maintaining detection rules, alerts, dashboards, and visualizations in Elastic to support DCO mission requirements.
• Assist with ingesting, normalizing, and validating log data from diverse sources including endpoint, network, cloud, and application telemetry.
• Collaborate with cyber operators and analysts to support threat detection, alert triage, and cyber incident investigation workflows.
• Identify opportunities to improve SIEM coverage, data quality, and detection fidelity; support implementation of approved improvements in coordination with the Government PMO.
• Support Cyber Security Service Provider (CSSP) activities including continuous monitoring and security event analysis.
• Update technical documentation under review including runbooks, standard operating procedures (SOPs), and knowledge base articles.
• Participate in Agile/SAFe Program Increment (PI) planning and sprint execution in support of platform delivery.
• Adhere to Air Force cybersecurity standards and all applicable DoD, IC, and USAF policy and directives across all enclaves.

Job-Specific Minimum Requirements

• Active Top Secret / SCI (TS/SCI) security clearance.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience).
• 3+ years of hands-on cybersecurity engineering experience.
• Basic proficiency level: ability to perform routine Elastic SIEM tasks using established procedures, with supervision and review.
• Demonstrated hands-on experience with Elastic Stack (Elasticsearch, Kibana, Logstash, Beats/Elastic Agent) in an operational SIEM environment.
• Experience supporting threat detection, alert triage, and/or cyber incident investigation.
• Familiarity with DCO concepts, CSSP operations, and defensive cyber frameworks.
• Experience working across multiple network security domains (NIPR, SIPR, or JWICS).
• Meet applicable DoD 8140 requirements for the assigned work role. DCWF 521, Cyber Defense Infrastructure Support Specialist, Basic Proficiency; specific required certifications pending contract confirmation.

Preferred Skills and Qualifications

• Experience with SIEM/SOAR integrations (e.g., Elastic, Palo Alto Cortex XSOAR, or similar).
• Familiarity with Elastic's Fleet/Agent management and integration development.
• Experience with AWS GovCloud environments (IL4/IL5/IL6).
• Knowledge of MITRE ATT&CK framework and its application to detection engineering.
• Experience with scripting/automation (Python, Bash, KQL/EQL) for SIEM rule development and data pipeline management.
• Familiarity with container-based deployments (Kubernetes/EKS) in classified environments.
• Prior experience supporting USAF or DoD DCO programs.
• One or more of the following certifications preferred: Elastic Certified Engineer, CompTIA CySA+, GCIA, or GCIH.

#techjobs #clearance #veteransPage

TCS056, T2, Band 5

Maximus is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information and other legally protected characteristics.

Maximus compensation is based on various factors including but not limited to job location, a candidate's education, training, experience, expected quality and quantity of work, required travel (if any), external market and internal value analysis including seniority and merit systems, as well as internal pay alignment. Annual salary is just one component of Maximus's total compensation package. Other rewards may include short- and long-term incentives as well as program-specific awards. Additionally, Maximus provides a variety of benefits to employees, including health insurance coverage, life and disability insurance, a retirement savings plan, paid holidays and paid time off. Compensation ranges may differ based on contract value but will be commensurate with job duties and relevant work experience. An applicant's salary history will not be used in determining compensation. Maximus will comply with regulatory minimum wage rates and exempt salary thresholds in all instances.

Accommodations

Maximus provides reasonable accommodations to individuals requiring assistance during any phase of the employment process due to a disability, medical condition, or physical or mental impairment. If you require assistance at any stage of the employment process—including accessing job postings, completing assessments, or participating in interviews,—please contact People Operations at [e-mail].