Cyber Security Engineer (Elastic SME)

CACI International•Hampton, VA

1d•$90,300 - $189,600•Onsite

About The Position

Join our dynamic team as a Senior Elastic Engineer at the DCGS Management Center (DMC) program located at Langley AFB, VA. This role offers an exciting opportunity to contribute to the maintenance and development of our Elasticsearch cluster, ensuring the health, status, and security monitoring of our systems. If you thrive in a fast-paced environment and are passionate about cybersecurity, we invite you to apply.

Requirements

Top Secret/SCI clearance
Bachelor’s degree in IS Technology, Computer Science, or related field (negotiable with equivalent experience)
Minimum of 6 years of related experience
DOD 8140 (8570) IAT Level II (Security+ or equivalent)

Nice To Haves

AF DCGS experience
Knowledge with Linux administration experience, including kernel tuning, system hardening, and performance optimization.
Knowledge in scripting languages (e.g., Python, Bash) and automation/configuration management tools (e.g., Ansible, Puppet) for large scale deployments.
Knowledge of security best practices and standards, including NIST, ISO, and SOC operations.
Proficiency with Linux/Unix operating systems and network protocols.
Experience with SIEM and Log management.
Strong analytical and problem-solving skills.

Responsibilities

Install, configure, optimize and maintain Elasticsearch, Logstash, Kibana, and Beats components across multiple enclaves.
Monitor, diagnose, and resolve complex cluster health, performance, and data ingestion issues, including shard allocation, indexing throughput, and query latency.
Provide the technical support to maintain the confidentiality, integrity, and availability of the AF DCGS.
Create custom Kibana dashboards and visualizations to provide insights into data trends.
Lead integration efforts between Elastic Stack and enterprise data sources, including syslog, auditd, Windows event pipelines, and custom data collectors.
Oversee server rebuilds, deployments, parser customization, and ingestion pipeline engineering.
Knowledge of common enterprise security devices and tools.
Coordinates and tracks operational activities using structured ticketing systems to maintain service continuity.
Administer cross-platform operating environments encompassing both Windows server and Linux distributions to support Elastic Stack operations.