Senior Elasticsearch Engineer - Security Analytics & SOC

TEKsystems; Lincoln (MA); On-site; USD 120,000 - 250,000; Full time

Job summary

TEKsystems is seeking a senior Elastic Stack engineer to design, implement, integrate and maintain automated security analytics platforms. The role involves leading complex security projects, mentoring teams, and delivering innovative ECS-compliant log processing and dashboards.

The candidate will work in Lincoln, MA, on-site, supporting government cybersecurity environments and large-scale data pipelines with AWS and cloud integration.

Qualifications

• 5+ years of experience administering Elastic Stack (Elasticsearch, Kibana, Logstash, Beats, or Fleet).
• Experience managing Elasticsearch index lifecycle policies, index templates, and data streams at scale; building Kibana dashboards and visualizations for security operations.
• Experience with Elastic Security detection rules, alerts, and case management workflows.
• Experience with log ingestion pipeline design across heterogeneous sources (network, endpoint, identity, cloud).
• Experience with Elastic Common Schema (ECS) and mapping non-standard logs into ECS fields.
• Experience in government cybersecurity environments (SOC, SIEM) or defensive cyber.
• Experience optimizing log collection from AWS, endpoints, and network devices.
• Knowledge of AI/ML concepts as applied to security analytics (anomaly detection, baselining, threat scoring).
• Ability to obtain a Secret clearance.
• Bachelor's degree in a related field.

Skills

Elastic Stack experience

Security operations

Mentoring

AI/ML concepts in security

Secret clearance eligibility

Elastic Stack governance

Log ingestion design

Education

Bachelor's degree

Tools

Elasticsearch

Kibana

Logstash

Beats

Fleet

Job description

TEKsystems is seeking a senior Elastic Stack engineer to design, implement, integrate and maintain automated security analytics platforms. The role involves leading complex security projects, mentoring teams, and delivering innovative ECS-compliant log processing and dashboards.

The candidate will work in Lincoln, MA, on-site, supporting government cybersecurity environments and large-scale data pipelines with AWS and cloud integration.