Elasticsearch Engineer with Security Clearance

Overview
We are seeking an experienced Elasticsearch Engineer to design, implement, and maintain enterprise-scale Elastic Stack solutions supporting mission-critical cybersecurity operations. This role will focus on building and optimizing security monitoring capabilities, log ingestion pipelines, detection engineering, and advanced analytics within highly secure cloud environments. The ideal candidate will have deep expertise with the Elastic Stack and experience supporting Security Operations Center (SOC), SIEM, defensive cyber, or enterprise security monitoring environments.

Responsibilities
Design, deploy, and administer Elastic Stack solutions including:
Elasticsearch
Kibana
Logstash
Beats
Fleet
Build and maintain Kibana dashboards, visualizations, and security analytics workflows. Develop and optimize log ingestion pipelines for network, endpoint, identity, and cloud data sources. Manage Elasticsearch index lifecycle policies, templates, and data streams at scale. Implement and support Elastic Security detection rules, alerts, and case management workflows. Normalize and enrich data using Elastic Common Schema (ECS).

Support threat hunting, incident response, and security monitoring operations. Optimize log collection and analytics for AWS-based environments. Collaborate with cybersecurity teams to improve detection coverage and operational visibility. Provide technical leadership and mentorship to junior engineers and team members. Assist with the integration of emerging AI and machine learning capabilities into security operations. Required Qualifications
5+ years of experience administering Elastic Stack technologies. Experience with Elasticsearch, Kibana, Logstash, Beats, and Fleet.

Experience managing

Index Lifecycle Management (ILM)
Index templates
Data streams
Large-scale log retention strategies
Experience building security dashboards and visualizations in Kibana. Experience with Elastic Security detections, alerts, and case management. Experience designing and maintaining log ingestion pipelines. Knowledge of Elastic Common Schema (ECS). Experience supporting SIEM, SOC, defensive cyber, or security operations environments. Experience optimizing logging and monitoring in AWS environments.

Understanding of security analytics concepts including anomaly detection and threat scoring. Ability to obtain a Secret Clearance. Bachelor's Degree or equivalent experience.

Preferred Qualifications
Experience supporting Department of Defense environments. Experience with Elasticsearch Query Language (ES|QL) and Event Query Language (EQL). Experience with Elastic Machine Learning capabilities and User & Entity Behavior Analytics (UEBA). Experience implementing advanced threat hunting and detection engineering workflows. Knowledge of AI-assisted security operations and LLM integrations. Python experience, including machine learning frameworks such as scikit-learn or PyTorch. Experience with Elastic Agent fleet management and custom integrations.

Experience supporting multi-classification cloud environments. Experience working within Agile development teams. Kubernetes certifications or practical Kubernetes platform experience. Desired Technical Skills
Elasticsearch
ELK Stack
Kibana
Logstash
Beats
Fleet
Elastic Security
SIEM Engineering
Threat Hunting
Detection Engineering
AWS
Python
ECS
ES|QL
EQL
Kubernetes
Security Operations (SOC) What You'll Gain
Opportunity to build and enhance enterprise-scale cybersecurity monitoring solutions. Exposure to cutting-edge security analytics, automation, and AI-enabled capabilities.

Direct impact on the security and resilience of mission-critical environments. Collaboration with highly skilled cloud, cybersecurity, and engineering professionals.