Elastic Security Engineer (SIEM)

SERVISS LLC • Sierra Vista, AZ

2d • Hybrid

About The Position

SERVISS is seeking an Elastic Security Engineer to support a Federal DoD SIEM program. This is a technical, hands-on role in which you will work within a multi-disciplined team to design, build, secure, maintain, optimize, and document multiple Elastic Stack enterprise solutions (Elasticsearch, Logstash, Kibana, Beats, Machine Learning, and SIEM) deployed globally in a Federal DoD environment, with automation support using Ansible.

You will perform continuous data-normalization functions and support the delivery of written technical deliverables such as SOPs and process workflows to optimize tool usage and contribute to new capabilities. Your infrastructure, data pipelines, and reporting automation will directly support internal engineering personnel and external customer requirements.

Requirements

• Active Top Secret security clearance
• US citizenship
• Compliance with DoD 8140 / 8570 IAT Level II certification prior to start date
• At least 4 years of hands-on experience in deployment, configuration, and solution development using the Elastic Stack for security and logging use cases (Elastic SIEM experience a plus)
• Demonstrated experience with the full Elastic Stack: Elasticsearch, Logstash, Kibana, Beats, Machine Learning, and REST API integration
• Demonstrated ability to use Ansible playbooks

Nice To Haves

• Experience integrating Elasticsearch with external systems (e.g., SOAR tools, threat intelligence platforms)
• Experience with data management: hot/warm/cold architectures, shard allocation and re-allocation, snapshots and restoration
• Strong experience evaluating existing Elastic clusters, configuration parameters, indexing, search and query performance tuning, security, and cluster administration
• Experience integrating Elasticsearch with authentication mechanisms such as SAML, LDAP, and PKI
• Experience supporting the Elastic Stack in on-prem and SaaS environments, including system monitoring and tuning
• Experience securing the Elastic Stack and hardening hosting environments
• Development experience in multiple languages (Python, Bash, PowerShell, Painless, etc.)
• Experience designing and implementing highly scalable Elastic Stack solutions
• Experience developing data structures and data mappings from various sources to achieve data normalization using Elastic Common Schema (ECS)
• Experience developing Logstash and/or ingest pipelines
• Experience developing custom Kibana visualizations and dashboards
• Experience developing custom reporting solutions using APIs that leverage Elasticsearch and ElastiCache
• Experience with end-to-end low-level design, development, administration, and delivery of Elasticsearch-based reporting solutions
• Strong technical foundation in building reliable, scalable, and supportable systems
• Experience with Red Hat Enterprise Linux deployment and administration

Responsibilities

• Design, build, secure, maintain, optimize, and document multiple Elastic Stack enterprise solutions (Elasticsearch, Logstash, Kibana, Beats, Machine Learning, and SIEM) deployed globally in a Federal DoD environment
• Automate deployment and configuration using Ansible playbooks
• Perform continuous data-normalization functions across diverse data sources
• Build data pipelines and reporting automation that directly support internal engineering personnel and external customer requirements
• Author written technical deliverables such as SOPs and process workflows to optimize tool usage and contribute to new capabilities
• Support a Federal DoD SIEM program as part of a multi-disciplined engineering team
• Maintain, optimize, and secure enterprise Elastic Stack solutions deployed globally
• Contribute to new capabilities and the continuous improvement of tool usage
• Engage and collaborate across engineering teams and customer stakeholders

Benefits

• Highly competitive compensation and best in class benefits
• 100% of medical, vision, dental, and life insurance premiums paid for by SERVISS
• Be part of an exciting company with ground floor opportunities in the Equity Participation Program
• Opportunities for annual performance bonuses and growth incentives
• 401(k) retirement plan with 6% dollar for dollar match

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed