Elastic SIEM Engineer

10 days ago

Quantico, VA, USASenior

Base Salary

$150k - $165k/yr

Responsibilities

Maintain enterprise-scale Elastic Stack security solutions for national security systems.
Design and implement detection rules, correlation searches, analytics pipelines, dashboards, visualizations, and threat-hunting workbenches.
Optimize data ingestion from AWS, Azure, GCP, network devices, endpoints, and security tools for high availability, performance, and scalability.
Tune detection logic, reduce false positives, automate security workflows, and integrate threat intelligence feeds.
Troubleshoot Elastic indexers, search heads, forwarder problems, and data transformation issues.
Analyze network traffic, firewall, IDS, DNS, and ESS logs to identify security threats.
Collaborate with security operations, engineering teams, and government stakeholders while documenting work against NIST 800-53 and RMF requirements.
Support critical security incidents, maintenance windows, and emergency response activities as needed.

At least five years of direct Elastic engineering or administration experience.
Active Secret clearance required, with eligibility for upgrade to TS/SCI.
Bachelor’s degree in information security or a related field and/or an equivalent combination of experience.
Must meet DoD 8140/8570 IAM or IAT Level II certification requirements through an accepted certification such as Security+, CySA+, CISSP, CISM, GSEC, GICSP, CCNA Security, or another listed credential.
Experience supporting and maintaining highly available Elastic infrastructure in an AWS cloud environment.
Strong understanding of Elastic architecture, data ingestion, indexing, search, visualization, data transformation, and normalization.
Experience customizing and configuring Elastic environments and developing scripts or applications.
Proficiency in Python or Bash for Elastic application and dashboard development.
Familiarity with networking principles and protocols.
At least two years of AWS experience is highly desired.
Strong problem-solving, communication, and interpersonal skills.

Health care, dental, vision, and life insurance may be offered.
401(k) and education assistance may be offered.
Paid time off, holidays, and other legally required paid leave may be offered.
Primarily telework with onsite work required up to one or two days per week at Hanover or Fort Meade, Maryland, as applicable.
Reliable voice communication and stable internet are required for alternate worksites.
Flexible hours may be required for critical incidents, maintenance windows, and emergency response.

11-50 employees