Junior Elastic SIEM Engineer – Onsite in San Antonio

Maximus

San Antonio (TX)

On-site

USD 70,000 - 90,000

Full time

14 days+

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Job summary

Maximus is seeking a Junior Cybersecurity Engineer to join the Elastic SIEM team in San Antonio, TX. This on-site role collaborates with senior engineers to operate and sustain the Elastic Stack across DoD environments, supporting threat detection and incident response.

The ideal candidate has a TS/SCI clearance, a related degree, and hands-on experience with Elastic Stack components. The position involves following procedures, contributing to runbooks, and working within Agile/SAFe planning

Qualifications

Active TS/SCI clearance is required.
Bachelor's degree in Cyber, CS, IT or related field (or equivalent experience).
3+ years of hands-on cybersecurity engineering experience.
Hands-on experience with Elastic Stack (Elasticsearch, Kibana, Logstash, Beats/Elastic Agent) in an operational SIEM environment.
Experience supporting threat detection, alert triage, and/or cyber incident investigation.
Familiarity with DCO concepts, CSSP operations, and defensive cyber frameworks.
Experience across NIPR/SIPR/JWICS networks.

Responsibilities

Assist with administering, operating, and sustaining the Elastic SIEM platform.
Monitor SIEM health, support capacity planning, and troubleshoot routine issues.
Develop, tune, and maintain detection rules, alerts, dashboards, and visualizations in Elastic.
Ingest, normalize, and validate log data from diverse sources.
Collaborate with cyber operators and analysts on threat detection workflows.
Support CSSP activities including continuous monitoring and security event analysis.
Update SOPs, runbooks, and knowledge base articles.
Participate in Agile/SAFe PI planning and sprint execution.