Junior Elastic SIEM Engineer – DCO & Threat Detection

Maximus, Inc.; San Antonio (TX); On-site; USD 90,000 - 110,000; Full time

Job summary

Maximus is seeking a Junior Cybersecurity Engineer – Elastic SIEM for an on-site role in San Antonio, TX. The position requires an active TS/SCI clearance and 3+ years of hands-on cybersecurity engineering experience with Elastic Stack in operational environments.

You will assist with administering Elastic SIEM across multiple DoD enclaves, develop detection logic, and support incident response efforts under senior guidance.

Qualifications

• Active TS/SCI security clearance.
• Bachelor’s degree or equivalent experience in a related field.
• 3 years of hands-on cybersecurity engineering experience.
• Experience with Elastic Stack in an operational SIEM environment.
• Experience supporting threat detection, alert triage, and/or cyber incident investigation.
• Familiarity with DCO concepts, CSSP operations, and defensive cyber frameworks.

Responsibilities

• Perform routine Elastic SIEM tasks under supervision and review.
• Assist with administering and sustaining Elastic SIEM across NIPRNet, SIPRNet, and JWICS.
• Monitor SIEM health, support capacity planning, and troubleshoot issues using runbooks.
• Develop, tune, and maintain detection rules, alerts, dashboards in Elastic.
• Ingest, normalize, and validate log data from endpoint, network, cloud, and application telemetry.
• Collaborate with cyber operators and analysts on threat detection and incident workflows.
• Identify opportunities to improve SIEM coverage and data quality; support approved improvements with PMO.
• Support CSSP activities including continuous monitoring and security event analysis.
• Update runbooks, SOPs, and knowledge base articles.

Skills

Elastic SIEM tasks

Threat detection

Incident investigation

Collaboration with operators

Documentation

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

Elasticsearch

Kibana

Logstash

Beats/Elastic Agent

Job description

Maximus is seeking a Junior Cybersecurity Engineer – Elastic SIEM for an on-site role in San Antonio, TX. The position requires an active TS/SCI clearance and 3+ years of hands-on cybersecurity engineering experience with Elastic Stack in operational environments.

You will assist with administering Elastic SIEM across multiple DoD enclaves, develop detection logic, and support incident response efforts under senior guidance.