ECS is seeking a Sr. Elastic Engineer to work in our Fairfax, VA office.
Job Description:
Are you passionate about the ever-evolving field of cybersecurity and ready to embark on a career with a positive and lasting impact? Join our dynamic team at ECS, a leading provider of solutions in science, engineering, and advanced technologies, including cloud, cybersecurity, artificial intelligence (AI), data, and enterprise transformation solutions. As an Elastic Engineer, you'll play a crucial role in our mission to help safeguard organizations against cyber threats. If you're seeking a challenging yet rewarding position where you can enhance your skills, collaborate with experts in the field, and contribute significantly to the protection of digital assets, this opportunity is perfect for you.
This role of an Elastic Engineer will support ECS's Professional Services and Managed Cybersecurity Services programs. This is a technical hands-on role to which you will be responsible for working within a multi-disciplined team to design, build, secure, maintain, optimize, and document the Elastic deployment for multiple customers. These deployments leverage the full Elastic Stack of capabilities such as Elasticsearch, Logstash, Kibana, Beats, Machine Learning, SIEM, and Fleet. You will provide continuous data normalization support functions and support the delivery of written technical deliverables such as SOPs and/or process workflows to optimize tool usage and contribute to new capabilities. Ideal for a tech-savvy individual passionate about evolving security landscapes, this role offers a significant opportunity to refine your skills and impact the cybersecurity sphere meaningfully.
Responsibilities
Work with the team to design, document, build, secure and maintain Elasticsearch, Logstash, Kibana (ELK Stack), Enterprise solutions deployed in the cloud to support non-product and production deployments.
Independently spearhead complex Elasticsearch installations, configurations, and deployments across diverse client environments, architectures and use cases.
Ensure tailored solutions that align with specific client needs and regulatory compliance. Serve as the expert point of contact for high-level deployment strategies.
Collaborate with top-tier engineers to architect sophisticated deployment frameworks. Take a leadership role in executing intricate configurations that cater to unique security requirements.
Direct and perform crucial maintenance activities on Elastic search deployments catering to diverse use cases in Observability, SIEM and Search, encompassing vital patches, updates, and strategic overhauls. Including messaging buses such as Kafka, cloud orchestration tools, such as Kubernetes.
Lead and refine the integration of SIEM, Observability and other platforms with a broad spectrum of tools and systems.
Craft and implement complex scripts to automate tasks, enhancing (Elastic Search) interactions with various systems, thereby streamlining operations and minimizing manual intervention.
Conduct in-depth health checks and continuous monitoring of Elasticsearch performance. Implement proactive strategies to uphold system integrity and anticipate potential issues.
Independently handle and document intricate issues, applying advanced technical acumen and collaborative problem-solving techniques.
Oversee Elasticsearch configuration management, making strategic modifications to enhance performance, accuracy, and adaptability to evolving environments.
Act as the primary liaison for high-level vendor interactions, tackling complex product-related challenges and driving resolution.
Engage in and lead specialized training sessions on capabilities. Conduct knowledge-sharing workshops to boost the team's expertise and operational effectiveness.
Provide top-level support and advice to security analysts, customer SREs and developers, maximizing the Elasticsearch potential to fulfill various use cases in Observability, SIEM and Search.
Offer strategic insights for automating routine tasks and refining system configurations, leveraging extensive experience and technical knowledge.
Required Skills:
Ability to demonstrate experience proficiency in Elasticsearch technologies in various disciplines of Observability, Search and SIEM.
Able and willing to obtain a US Security Clearance.
Bachelor's degree; preferably in Computer Science, Information Security, or a related field. Will consider experience in lieu of a degree.
Demonstrated mastery in SIEM concepts and platforms such as Elastic, Splunk, IBM QRadar, or LogRhythm, including the ability to design, implement, and optimize complex SIEM solutions.
In-depth experience with system administration across various operating systems, especially those prevalent in corporate environments (Windows, Linux, MacOS), with a focus on security configurations and optimizations.
Comprehensive knowledge of the cybersecurity field, including advanced threat landscapes, sophisticated security protocols, and a wide array of cyberattack methodologies.
Proficiency in scripting languages like Python, PowerShell, or Bash is required, with an emphasis on developing complex scripts for automating tasks and integrating disparate systems.
Proven ability to lead and collaborate effectively within a team, including guiding and mentoring junior engineers, interfacing with IT staff, and working closely with security analysts to enhance overall security strategies.
The capability to think strategically about the use of within the broader organizational context, including the development of innovative approaches to using Experience deploying, configuring, maintaining, and troubleshooting Elasticsearch and Kibana on bare metal, Elastic Cloud Enterprise (ECE), Elastic Cloud on Kubernetes (ECK), and/or Elasticsearch Service.
Outstanding verbal and written communication abilities for creating detailed documentation, conveying complex technical concepts in an understandable manner, and effectively reporting to both technical teams and upper management.
Configuration management experience through Ansible/Terraform/Chef/Puppet or like tools.
Security community contributions (blog posts, white papers, conference talks, tool development, etc.)
A stronger grasp of advanced network infrastructure, including cloud networks, virtual networks, and network segmentation, which can be crucial for more sophisticated Elasticsearch deployments.
Familiarity with implementing machine learning pipelines and integrating AI-driven analytics into Elastic Search for improved incident detection and automated response.
Experience with AWS or Kubernetes Infrastructure models.
Skills in project management and familiarity with methodologies like Agile can be beneficial, particularly in managed service environments.
ECS is an equal opportunity employer and does not discriminate or allow discrimination on the basis of race, color, religion, sex, age, sexual orientation, gender identity or expression, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, status as a crime victim, disability, protected veteran status, or any other characteristic protected by law. ECS promotes affirmative action for minorities, women, disabled persons, and veterans.
ECS is a leading mid-sized provider of technology services to the United States Federal Government. We are focused on people, values and purpose. Every day, our 3800+ employees focus on providing their technical talent to support the Federal Agencies and Departments of the US Government to serve, protect and defend the American People.
