Cloud Security Engineer

What you'll do

• Design and maintain systems and tools to automate complex cyber activities.
• Manage Elasticsearch index lifecycle policies, templates, and data streams at scale.
• Build Kibana dashboards, visualizations, and lens-based analytics for security operations.
• Develop Elastic Security detection rules, alerts, and case management workflows.
• Design log ingestion pipelines including parsing, enrichment, and normalization across diverse sources.
• Map non-standard log sources into Elastic Common Schema (ECS) compliant fields.
• Optimize log collections from AWS platforms, endpoints, and network devices.
• Implement advanced threat hunting and detection-as-code workflows using ES|QL or EQL.

What we're looking for

• Bachelor's degree required.
• Secret clearance is required.
• 5+ years of experience administering Elastic Stack components including Elasticsearch, Kibana, Logstash, Beats, or Fleet.
• Experience managing Elasticsearch index lifecycle policies, templates, data streams, and building Kibana dashboards for security operations.
• Experience with Elastic Security detection rules, alerts, and case management workflows.
• Experience designing log ingestion pipelines involving parsing, enrichment, and normalization across various sources.
• Experience mapping non-standard log sources into Elastic Common Schema (ECS) compliant fields.
• Experience working in government cybersecurity environments such as SOC or SIEM operations.