Elastic Engineer with Security Clearance

Overview
This role involves working with clients and peers to build a high-performing system using Elastic to aggregate logs from multiple systems into a single common schema. The engineer will utilize Elastic Common Schema (ECS) formatted fields, create visualizations and alerts for threat hunting, maintain infrastructure, and identify issues or anomalous behavior proactively. The position requires collaboration with vendors to ensure best practices for deployment and maintenance within designated security requirements.

Responsibilities: Collaborate with clients and team members to develop and optimize Elastic-based log aggregation systems. Configure, maintain, upgrade, and troubleshoot Elastic Stack components such as Elasticsearch, Logstash, Kibana, and Beats. Design and develop high-quality Kibana visualizations and dashboards for threat analysis. Create and interpret log pipelines, converting raw logs into ECS-formatted documents. Work with vendors to determine deployment best practices, ensuring compliance with security standards.

Maintain infrastructure and implement monitoring solutions for potential issues or anomalies. Develop and fine-tune visualizations and alerts to support threat hunting and incident response efforts. Deploy and support Elastic solutions within structured security environments, including handling system upgrades and maintenance.