Junior Elastic SIEM Engineer – TS/SCI Clearance

Maximus; San Antonio (TX); On-site; USD 65,000 - 95,000; Full time

Job summary

Maximus is seeking a Junior Cybersecurity Engineer – Elastic SIEM to join our on-site team in San Antonio, TX. The role requires active TS/SCI clearance and involves administering Elastic Stack across NIPRNet, SIPRNet, and JWICS environments, monitoring SIEM health, and collaborating with cyber operators.

The ideal candidate has a related degree, hands-on Elastic Stack experience, and a willingness to work in a fast-paced DoD-focused setting with adherence to DoD and USAF policies.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience).
• 3+ years of hands-on cybersecurity engineering experience.
• Active Top Secret / SCI (TS/SCI) security clearance.
• Experience with Elastic Stack and SIEM operations.
• Familiarity with DCO concepts, CSSP operations, and defensive cyber frameworks.

Responsibilities

• Perform routine tasks under the guidance and review of experienced engineers, following established procedures.
• Assist with administering, operating, and sustaining the Elastic SIEM platform across NIPRNet, SIPRNet, and JWICS environments.
• Monitor SIEM health, support capacity planning, and troubleshoot routine platform issues using runbooks; escalate outages and complex degradations.
• Develop, tune, and maintain detection rules, alerts, dashboards, and visualizations in Elastic.

Skills

Scripting/Automation

Threat detection

Team collaboration

Geographic security policy

Education

Bachelor's degree in Cybersecurity, CS, IT, or related field

Tools

Elastic Stack

Kibana

Logstash

Beats/Elastic Agent

Palo Alto Cortex XSOAR

Kubernetes

AWS GovCloud

MITRE ATT&CK

Python

Bash

KQL/EQL

Job description

Maximus is seeking a Junior Cybersecurity Engineer – Elastic SIEM to join our on-site team in San Antonio, TX. The role requires active TS/SCI clearance and involves administering Elastic Stack across NIPRNet, SIPRNet, and JWICS environments, monitoring SIEM health, and collaborating with cyber operators.

The ideal candidate has a related degree, hands-on Elastic Stack experience, and a willingness to work in a fast-paced DoD-focused setting with adherence to DoD and USAF policies.