Cloud Security Engineer
🚨 Hiring: Senior Elastic / SIEM Cybersecurity Engineer📍 Location: Hanscom AFB, MA – 5 Days Onsite🇺🇸 Clearance: U.S. Citizen; must be eligible for Secret clearance. Active clearance is not required to start.✈️ Relocation Assistance Available🔹 About the RoleWe are seeking a Senior Elastic/SIEM Cybersecurity Engineer to serve as the primary Elastic resource on the team. This is an excellent opportunity for someone who can independently manage complex Elastic environments while collaborating effectively with a broader cybersecurity team.
🔹 Key Responsibilities:
Design, implement, integrate, and maintain systems and tools supporting complex cybersecurity operations.
Administer and optimize the Elastic Stack, including Elasticsearch, Kibana, Logstash, Beats, and/or Fleet.
Manage Elasticsearch index lifecycle policies, templates, and data streams at scale.
Build Kibana dashboards, visualizations, and Lens-based analytics for security operations.
Develop and manage Elastic Security detection rules, alerts, and case management workflows.
Design log ingestion pipelines including parsing, enrichment, and normalization.
Map heterogeneous log sources to Elastic Common Schema (ECS).Optimize security log collection from AWS, endpoints, network devices, and identity systems.
Support cybersecurity operations in SOC/SIEM/defensive cyber environments.
Apply automation and Infrastructure as Code using Terraform.
Work with GitLab and modern CI/CD practices.
Troubleshoot complex technical issues and provide innovative cybersecurity solutions.
🔹 Required Qualifications:
5+ years of Elastic Stack administration OR strong Linux + SIEM + coding experience that can substitute for direct Elastic experience.
Strong experience with Elasticsearch, Kibana, Logstash, Beats, or Elastic Fleet.
Experience with SIEM, SOC operations, or defensive cybersecurity.
Experience in government/federal cybersecurity environments.
Cloud experience, preferably AWS.Strong Linux experience.
Experience with Terraform and GitLab.
Bachelor's degree.
U.S. Citizen eligible to obtain a Secret clearance.
Ability to work onsite 5 days/week in Hanscom AFB, MA.
⭐ Nice to Have:
DoD cybersecurity experience.
Elastic ML / UEBA and anomaly detection.
ES|QL or EQL.Elastic Agent Fleet management at scale.
Python, scikit-learn, or PyTorch.
Elastic AI Assistant / LLM integration.
Kubernetes experience or certification.
Experience with IL4/IL5/IL6 environments.
Threat hunting and detection-as-code.