Senior Elastic Engineer

KIHOMAC•Colorado Springs, CO

About The Position

Architect, deploy, and maintain a highly available and scalable Elastic Stack environment, specializing in Elastic EDR/Defend Configure and optimize Elastic EDR/Defend policies and data pipelines for threat detection, prevention, and security event enrichment Develop and maintain Kibana dashboards and visualizations for real-time security monitoring, threat identification, and incident response tracking Perform proactive threat hunting and in-depth security analysis using Elastic EDR/Defend capabilities Troubleshoot complex Elastic Stack issues, develop comprehensive documentation, and mentor junior engineers to ensure operational excellence Other duties as assigned

Requirements

5+ years of professional experience in the required task area
10+ years of general (full-time) work experience
5+ years of experience working with the Elastic Stack (Elasticsearch, Logstash, Kibana)
3+ years of experience specifically implementing and managing Elastic EDR and Defend solutions
2+ years of experience in a lead or senior role, mentoring and guiding other team members
1+ years of experience working in a management or leadership role
Must have a strong understanding of security principles, threat detection, and incident response
Must have experience with data ingestion, processing, and enrichment techniques
Must be proficient in at least one scripting language (e.g., Python, Bash, PowerShell
Bachelor’s degree in relevant engineering or science discipline preferred
Active DoD 8570 IAT Level II certification (ex: Security+) required
Must be a US citizen
Candidate must be in possession of a minimum DoD issued Secret Clearance
Ability and willingness to obtain a Top Secret clearance

Nice To Haves

Linux and Windows Server administration.
Containerization technologies (Docker, Kubernetes)
Automation tools (Ansible, Puppet, Chef)
Cloud platforms (AWS, Azure, GCP)
SIEM technologies and security event management
Security frameworks and compliance standards (e.g., NIST, FedRAMP)
Strong understanding of network protocols and security concepts
Threat intelligence platforms and data feeds
Tuning and optimizing Elastic EDR and Defend for specific threat landscapes
CISSP certification preferred

Responsibilities

Architect, deploy, and maintain a highly available and scalable Elastic Stack environment, specializing in Elastic EDR/Defend
Configure and optimize Elastic EDR/Defend policies and data pipelines for threat detection, prevention, and security event enrichment
Develop and maintain Kibana dashboards and visualizations for real-time security monitoring, threat identification, and incident response tracking
Perform proactive threat hunting and in-depth security analysis using Elastic EDR/Defend capabilities
Troubleshoot complex Elastic Stack issues, develop comprehensive documentation, and mentor junior engineers to ensure operational excellence
Other duties as assigned