Senior Security Integration Engineer (Elastic Stack)

KIHOMAC•Huntsville, AL

8d•$130,000 - $150,000•Onsite

About The Position

This role involves providing expert guidance and training on security integration, particularly with the Elastic Stack. The engineer will advise end-users and inform senior leadership, demonstrating a deep understanding of network architectures and security principles. Key responsibilities include collaborating with various teams for maintenance and changes, performing end-user support, generating network design guidance, and ensuring the integrity and security of network infrastructure. The position also requires updating documentation, performing security hardening, and mentoring junior engineers.

Requirements

Bachelor’s degree in relevant engineering or science discipline preferred.
Active CCNA, CySA+, GSEC, or Security+ certification required.
10+ years of general (full-time) work experience required.
5+ years of directly related experience required.
2+ years of experience in a management or leadership role required.
Must have a strong understanding of enterprise networks, including routing, switching, VPNs, firewalls, and network security tools.
Experience with data ingestion, processing, and enrichment techniques required.
Ability to build and maintain network and data flow diagrams (e.g., Visio, Lucidchart, Draw.io).
Proficiency in Linux systems, command-line tools, and system administration fundamentals required.
Experience working directly with customers in a technical consulting or engineering capacity required.
Must be a US citizen.
Candidate must be in possession of a minimum DoD issued Secret Clearance.

Nice To Haves

Elastic Certified Engineer, Elastic Certified Analyst, or relevant Elastic certifications preferred.
Experience with cloud platforms and logging pipelines (AWS, Azure, GCP, cloud-native telemetry) preferred.
Familiarity with ECS (Elastic Common Schema) and data normalization best practices preferred.
Experience implementing detection engineering or threat hunting workflows in Elastic Security preferred.
Knowledge of scripting languages (Python, PowerShell, Bash) to automate ingestion and data validation preferred.
Experience integrating EDR, NDR, IAM, and vulnerability management logs into a SIEM preferred.
Understanding of MITRE ATT&CK, cyber kill chain, and threat intelligence ingestion preferred.
Experience mentoring or leading small technical teams preferred.

Responsibilities

Provide advice and training to end-users, and guide and inform senior leadership.
Demonstrate a firm understanding of network architectures including Cisco routers, switches, firewalls, IPS, and internal and external routing to delegate tasks to network engineering team.
Work directly with corresponding Team Leads, Project Managers, Network Engineers, and Network Architect for coordination of routine maintenance, break/fix repair, and planned changes, coordinating any down time with all appropriate leadership and stakeholders.
Perform end-user support to internal teammates and tenants/performers alike, including but not limited to Layer 1-3 troubleshooting, physical fault isolation cabling, etc.
Generate network design guidance in coordination with architects, SMEs, and system engineers; along with the installation/deployment, configuration, testing, compliance enforcement, and reporting on MDSEA assets to include Cisco, Gigamon, and Riverbed hardware, along with the associated software suites and those of VMware NSX/ vCenter, SolarWinds, and other tools as necessary as well as assure and sustain the integrity and security of network infrastructure.
Update documentation (network diagrams, rack diagrams, etc.) utilizing approved work vehicles and the change management process.
Perform hardening and STIG checklist validation/verification for associated network infrastructure and virtual machines.
Provide mentorship and training to junior/mid engineers to ensure their participation in experience-gathering day-to-day activities, and review work products and efforts during their development.
Other duties as assigned.