Job Requirements
Hanscom AFB, MA
Secret Polygraph not specified
Mid Level Career (5+ yrs experience)
$120,000 - $250,000
Job Description
Elastic Cloud Security Engineer
Location: Lexington, MA
Clearance Requirement: Must be eligible to obtain and maintain a Secret Security Clearance
Employment Type: Full-Time
Citizenship: U.S. Citizen Required
Overview
We are seeking an experienced Elastic Cloud Security Engineer to support the deployment, administration, and optimization of Elastic Security solutions within highly secure government environments. This individual will serve as a key engineer responsible for implementing and maintaining Elastic Stack technologies in cloud and classified environments, enabling advanced security monitoring, threat detection, and operational visibility.
The ideal candidate combines hands-on Elastic administration experience with cloud engineering, cybersecurity, and platform deployment expertise.
Key Responsibilities
Deploy, configure, and maintain Elastic Stack technologies including Elasticsearch, Kibana, Logstash, Beats, Elastic Agent, and Fleet.
Design and implement scalable log ingestion pipelines across cloud, network, endpoint, and identity data sources.
Build and manage Elasticsearch clusters in secure enterprise environments.
Configure and maintain Kibana dashboards, visualizations, and operational reporting.
Implement Elastic Security detections, alerts, and monitoring capabilities.
Support deployment and sustainment of Elastic solutions within government cloud environments, including IL5/IL6 architectures.
Optimize data retention, index lifecycle management, templates, and storage strategies.
Configure log parsing, enrichment, normalization, and Elastic Common Schema (ECS) mappings.
Collaborate with cybersecurity, cloud, infrastructure, and DevSecOps teams to improve detection and monitoring capabilities.
Support troubleshooting, performance tuning, upgrades, and maintenance activities across Elastic environments.
Automate deployment and operational processes using scripting and Infrastructure-as-Code methodologies.
Required Qualifications
5+ years of experience administering Elastic Stack technologies, including Elasticsearch, Kibana, Logstash, Beats, Elastic Agent, or Fleet.
Experience deploying and supporting Elastic solutions in enterprise or government environments.
Experience with log ingestion, parsing, enrichment, and normalization across multiple data sources.
Experience creating and maintaining Kibana dashboards and visualizations.
Experience managing Elasticsearch clusters, indexes, templates, and lifecycle policies.
Experience supporting cybersecurity operations, SIEM platforms, threat detection, or defensive cyber programs.
Experience with AWS cloud services and cloud-based log collection.
Working knowledge of Elastic Common Schema (ECS).
Experience with Linux administration and troubleshooting.
Ability to obtain and maintain a Secret Security Clearance.
Bachelor's degree or equivalent combination of education and experience.
Preferred Qualifications
Experience deploying solutions in IL5, IL6, or other classified environments.
Experience with Elastic Security, threat hunting, detection engineering, or SIEM operations.
Experience with Kubernetes, OpenShift, EKS, or containerized platform deployments.
Experience with AWS GovCloud or other government cloud environments.
Experience with DevSecOps practices and CI/CD pipelines.
Experience with ES|QL, EQL, or detection-as-code methodologies.
Experience with Elastic Machine Learning, UEBA, anomaly detection, or AI-assisted security workflows.
Hands-on experience with Python, PowerShell, Bash, or other automation languages.
Active Secret, TS, or TS/SCI security clearance.
Location: Lexington, MA
Clearance Requirement: Must be eligible to obtain and maintain a Secret Security Clearance
Employment Type: Full-Time
Citizenship: U.S. Citizen Required
Overview
We are seeking an experienced Elastic Cloud Security Engineer to support the deployment, administration, and optimization of Elastic Security solutions within highly secure government environments. This individual will serve as a key engineer responsible for implementing and maintaining Elastic Stack technologies in cloud and classified environments, enabling advanced security monitoring, threat detection, and operational visibility.
The ideal candidate combines hands-on Elastic administration experience with cloud engineering, cybersecurity, and platform deployment expertise.
Key Responsibilities
Deploy, configure, and maintain Elastic Stack technologies including Elasticsearch, Kibana, Logstash, Beats, Elastic Agent, and Fleet.
Design and implement scalable log ingestion pipelines across cloud, network, endpoint, and identity data sources.
Build and manage Elasticsearch clusters in secure enterprise environments.
Configure and maintain Kibana dashboards, visualizations, and operational reporting.
Implement Elastic Security detections, alerts, and monitoring capabilities.
Support deployment and sustainment of Elastic solutions within government cloud environments, including IL5/IL6 architectures.
Optimize data retention, index lifecycle management, templates, and storage strategies.
Configure log parsing, enrichment, normalization, and Elastic Common Schema (ECS) mappings.
Collaborate with cybersecurity, cloud, infrastructure, and DevSecOps teams to improve detection and monitoring capabilities.
Support troubleshooting, performance tuning, upgrades, and maintenance activities across Elastic environments.
Automate deployment and operational processes using scripting and Infrastructure-as-Code methodologies.
Required Qualifications
5+ years of experience administering Elastic Stack technologies, including Elasticsearch, Kibana, Logstash, Beats, Elastic Agent, or Fleet.
Experience deploying and supporting Elastic solutions in enterprise or government environments.
Experience with log ingestion, parsing, enrichment, and normalization across multiple data sources.
Experience creating and maintaining Kibana dashboards and visualizations.
Experience managing Elasticsearch clusters, indexes, templates, and lifecycle policies.
Experience supporting cybersecurity operations, SIEM platforms, threat detection, or defensive cyber programs.
Experience with AWS cloud services and cloud-based log collection.
Working knowledge of Elastic Common Schema (ECS).
Experience with Linux administration and troubleshooting.
Ability to obtain and maintain a Secret Security Clearance.
Bachelor's degree or equivalent combination of education and experience.
Preferred Qualifications
Experience deploying solutions in IL5, IL6, or other classified environments.
Experience with Elastic Security, threat hunting, detection engineering, or SIEM operations.
Experience with Kubernetes, OpenShift, EKS, or containerized platform deployments.
Experience with AWS GovCloud or other government cloud environments.
Experience with DevSecOps practices and CI/CD pipelines.
Experience with ES|QL, EQL, or detection-as-code methodologies.
Experience with Elastic Machine Learning, UEBA, anomaly detection, or AI-assisted security workflows.
Hands-on experience with Python, PowerShell, Bash, or other automation languages.
Active Secret, TS, or TS/SCI security clearance.
group id: 10105424
