Recently postedEmployeeEngineering

Elasticsearch Engineer with Security Clearance

TEKsystems c/o Allegis GroupHanscom Air Force Base, MA🇺🇸United States

Why this role stands out

This hybrid role offers a fantastic opportunity to leverage your deep expertise in Elasticsearch to build cutting-edge cybersecurity solutions, driving significant impact within a reputable organization. You'll thrive here if you are a mid-senior engineer with extensive experience in the Elastic Stack and a passion for security operations, eager to contribute to advanced analytics and detection engineering. Apply today to grow your skills and advance your career in a dynamic and secure environment.

Quick overview

SeniorityMid Senior

Employment typeEmployee

Work modeOn Site

LocationHanscom Air Force Base, MA, United States

Job description

TEKsystems is seeking an experienced Elasticsearch Engineer to join our client’s team in a permanent, onsite role supporting mission-critical initiatives at Hanscom AFB. This position will design, implement, integrate, and maintain advanced systems and tools that automate complex cybersecurity activities. The engineer will tackle highly complex technical challenges, develop innovative solutions, and apply leading-edge engineering principles and technologies. This is a senior-level opportunity offering significant technical ownership and autonomy, along with the opportunity to mentor others and help shape engineering best practices across the team. Qualifications

5+ years of experience administering Elastic Stack, including Elasticsearch, Kibana, Logstash, Beats, or Fleet
Experience managing Elasticsearch index lifecycle policies, index templates, and data streams at scale, and building Kibana dashboards, visualizations, and lens-based analytics for security operations
Experience with Elastic Security detection rules, alerts, and case management workflows
Experience with log ingestion pipeline design, including parsing, enrichment, and normalization across heterogeneous log sources such as network, endpoint, identity, and cloud
Experience with Elastic Common Schema (ECS) and mapping non-standard log sources into ECS-compliant fields
Experience working in government cybersecurity environments such as SOC, SIEM operations, or defensive cyber
Experience optimizing log collections from AWS platform, endpoints, and network devices
Knowledge of AI/ML concepts as applied to security analytics such as anomaly detection, behavioral baselining, or threat scoring
Ability to obtain a Secret clearance
Bachelor’s degree