Job Requirements Hanscom Air Force Base, MA Secret Polygraph not specified Mid Level Career (5+ yrs experience) $120,000 - $250,000 Job Description Overview We are seeking an experienced Elasticsearch Engineer to design, implement, and maintain enterprise-scale Elastic Stack solutions supporting mission-critical cybersecurity operations. This role will focus on building and optimizing security monitoring capabilities, log ingestion pipelines, detection engineering, and advanced analytics within highly secure cloud environments. The ideal candidate will have deep expertise with the Elastic Stack and experience supporting Security Operations Center (SOC), SIEM, defensive cyber, or enterprise security monitoring environments. Responsibilities Design, deploy, and administer Elastic Stack solutions including: Elasticsearch Kibana Logstash Beats Fleet Build and maintain Kibana dashboards, visualizations, and security analytics workflows. Develop and optimize log ingestion pipelines for network, endpoint, identity, and cloud data sources. Manage Elasticsearch index lifecycle policies, templates, and data streams at scale. Implement and support Elastic Security detection rules, alerts, and case management workflows. Normalize and enrich data using Elastic Common Schema (ECS). Support threat hunting, incident response, and security monitoring operations. Optimize log collection and analytics for AWS-based environments. Collaborate with cybersecurity teams to improve detection coverage and operational visibility. Provide technical leadership and mentorship to junior engineers and team members. Assist with the integration of emerging AI and machine learning capabilities into security operations. Required Qualifications 5+ years of experience administering Elastic Stack technologies. Experience with Elasticsearch, Kibana, Logstash, Beats, and Fleet.

Experience managing:

Index Lifecycle Management (ILM) Index templates Data streams Large-scale log retention strategies Experience building security dashboards and visualizations in Kibana. Experience with Elastic Security detections, alerts, and case management. Experience designing and maintaining log ingestion pipelines. Knowledge of Elastic Common Schema (ECS). Experience supporting SIEM, SOC, defensive cyber, or security operations environments. Experience optimizing logging and monitoring in AWS environments. Understanding of security analytics concepts including anomaly detection and threat scoring. Ability to obtain a Secret Clearance. Bachelor's Degree or equivalent experience. Preferred Qualifications Experience supporting Department of Defense environments. Experience with Elasticsearch Query Language (ES|QL) and Event Query Language (EQL). Experience with Elastic Machine Learning capabilities and User & Entity Behavior Analytics (UEBA). Experience implementing advanced threat hunting and detection engineering workflows. Knowledge of AI-assisted security operations and LLM integrations. Python experience, including machine learning frameworks such as scikit-learn or PyTorch. Experience with Elastic Agent fleet management and custom integrations. Experience supporting multi-classification cloud environments. Experience working within Agile development teams. Kubernetes certifications or practical Kubernetes platform experience. Desired Technical Skills Elasticsearch ELK Stack Kibana Logstash Beats Fleet Elastic Security SIEM Engineering Threat Hunting Detection Engineering AWS Python ECS ES|QL EQL Kubernetes Security Operations (SOC) What You'll Gain Opportunity to build and enhance enterprise-scale cybersecurity monitoring solutions. Exposure to cutting-edge security analytics, automation, and AI-enabled capabilities. Direct impact on the security and resilience of mission-critical environments. Collaboration with highly skilled cloud, cybersecurity, and engineering professionals.

group id:

10105424 Log in to view the job poster Apply now