Senior Elastic Engineer

CyberMaxx, Inc.; Linthicum (MD); On-site; USD 160,000 - 230,000; Full time

Benefits offered by this job

Flexible PTO

401k with company match

Medical, Dental and Vision insurance

Disability insurance

Mental health support

Job summary

CyberMaxx, Inc. is seeking a Senior Elastic Engineer to own and optimize the Elastic Stack, ensuring reliability, security, and scalable data processing for security telemetry.

You will lead ingestion pipelines from EDR, cloud, and network sources, and collaborate with detection engineering to improve performance and detections. You will mentor a small team of Elastic engineers, define standards, and drive on-call readiness, upgrades, and runbooks while documenting architecture decisions for

Qualifications

• 7+ years in search/data engineering or infra roles with 6+ years of Elasticsearch/Elastic Stack architecture experience.
• Deep Elasticsearch internals knowledge: sharding, ILM, mapping, query DSL/ES|QL, scale tuning.
• Experience building ingestion pipelines with Logstash/Beats/Elastic Agent, esp. security logs.
• Cloud experience (AWS/Azure), Docker/Kubernetes, and infrastructure-as-code.
• Knowledge of security operations concepts and SIEM workflows is a plus.
• Programming or scripting ability (Python/Go) for automation.

Responsibilities

• Architect and own Elastic Stack for high-volume security telemetry and detection.
• Design ILM strategies, data models, sharding, and tiering for petabyte-scale data.
• Build and harden ingestion pipelines from multiple sources into Elastic Stack.
• Tune cluster performance and perform capacity planning for growth.
• Own Elastic Stack security, upgrades, runbooks, monitoring, and IR processes.
• Evaluate new Elastic capabilities to improve detection and analyst UX.
• Set technical direction and mentor a small Elastic engineering team.
• Document architecture decisions and represent Elastic platform in cross-functional planning.

Skills

Elastic Stack architecture

Cloud platforms AWS/Azure

Docker/Kubernetes

Scripting Python/Go

Security operations concepts

Mentoring engineers

ECK/Elastic Security

Education

Bachelor's degree in CS/EE or equivalent

Tools

Elasticsearch/Logstash

Kibana/Beats

Elastic Agent

ILM/Index lifecycle

Job description

Description

At CyberMaxx, we believe it is our duty to defend against those committed to wide-scale societal disruption through cyberattacks.

We help our customers reduce risk by tightly integrating MDR with offensive security, threat hunting, security research, and digital forensics and incident response (DFIR) to continually adapt to new and evolving threats. Our modern MDR (Managed Detection & Response) approach is tailored to the unique characteristics and risk factors of each customer, enabling us to take full ownership of the response process and, optionally, manage key security controls. By thinking like an adversary and defending like a guardian, we help our customers stay a step ahead of threat actors.

At CyberMaxx, we value humility, transparency, intellectual curiosity, and a customer first approach.

The Senior Elastic Engineer is responsible for the administration, optimization, and governance of the full Elastic Stack and ensures its reliability and scalability

This role ensures platform reliability, security, scalability, and alignment with organizational workflows while driving user adoption and continuous improvement.

What You Will Do:

• Architect and own the Elastic Stack (Elasticsearch, Logstash, Beats/Elastic Agent, Kibana) supporting high-volume security telemetry ingestion, detection, and search. Direct implementation experience with ECK is required.
• Design data models, index lifecycle management (ILM) strategies, sharding, and hot-warm-cold tiering for petabyte-scale, multi-tenant security data.
• Build and harden ingestion pipelines from EDR, network, cloud, and log sources into the Elastic Stack, in partnership with detection engineering.
• Tune cluster performance — query latency, indexing throughput, resource allocation — and drive capacity planning for growth.
• Own Elastic Stack security, upgrades, and reliability, including runbooks, monitoring, and incident response for the platform itself.
• Evaluate and roll out new Elastic capabilities (e.g., Elastic Security, ES|QL, machine learning jobs) that improve detection speed and analyst experience.
• Set technical direction for and mentor a small team of Elastic engineers, establishing standards, review practices, and on-call structure for the platform.
• Document architecture decisions, standards, and best practices, and represent the Elastic platform in cross-functional planning and vendor (Elastic) conversations.

What We Are Looking For:

• 7+ years in search/data engineering or infrastructure roles, with 6+ years of hands-on Elasticsearch/Elastic Stack architecture experience.
• Deep expertise in Elasticsearch internals: sharding, replication, ILM, mapping/index design, query DSL and/or ES|QL, and cluster performance tuning at scale.
• Experience building ingestion pipelines with Logstash, Beats, or Elastic Agent, ideally with security/log data (SIEM, EDR, cloud logs).
• Comfort operating Elastic in private and public cloud environments (AWS/Azure) and with containerization (Docker/Kubernetes) and infrastructure-as-code.
• Working knowledge of security operations concepts (detections, alerting, SIEM workflows) is a strong plus
• Scripting/programming ability (Python, Go, or similar) for automation and tooling.
• Elastic Certified Engineer certification is a plus, not required.

Some Of What We Offer

• Flexible Paid Time Off
• 401k with a company match
• Medical, Dental and Vision Coverage
• Voluntary Short Term and Long-Term Disability
• Employee Assistance Program with Mental Health Supplement
• Voluntary Basic, Accidental, and other ancillary life insurance
• Health Savings Account Contribution (with selection of a HDHP)
• 10 annual, paid holidays

CyberMaxx will consider all qualified applicants without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, disability, veteran or military status, age, genetic information, or other characteristics protected by federal, state, or local applicable law.