Elastic Cloud Security Engineer

Location: Hanscom AFB, MA 01731 – Onsite 5 Days a Week🇺🇸 Citizenship: U.S. Citizens only🔐 Security Clearance: Must be eligible to obtain a Secret clearance; candidates can start without an active clearance✈️ Relocation Assistance Available

About the Opportunity: We are seeking an experienced Elastic Cloud Security Engineer to serve as a primary technical resource supporting advanced cybersecurity operations in a government environment. The ideal candidate will have strong hands-on experience with the Elastic Stack, cloud security, SIEM operations, and security automation, along with the ability to work independently and collaborate effectively with a technical team. Key Responsibilities & Qualifications 5+ years of experience administering the Elastic Stack, including Elasticsearch, Kibana, Logstash, Beats, and/or Fleet. Experience with Elastic Security detection rules, alerts, case management, dashboards, and threat hunting. Strong knowledge of log ingestion pipelines, parsing, enrichment, normalization, and Elastic Common Schema (ECS).Experience with Elasticsearch index lifecycle policies, index templates, and data streams at scale. Background in government cybersecurity, SOC, SIEM operations, or defensive cyber. Cloud experience, preferably AWS, including security log collection from cloud platforms, endpoints, and network devices. Experience with Linux, Terraform, and GitLab. Knowledge of AI/ML concepts for security analytics, anomaly detection, behavioral baselining, and threat scoring. Bachelor’s degree and ability to obtain a Secret security clearance.

Nice to Have: Department of Defense (DoD) experience. Elastic ML, UEBA, Elastic AI Assistant, or LLM integration experience. Python, scikit-learn, or PyTorch for security analytics. Elastic Agent Fleet management, ES|QL, EQL, and detection-as-code. Kubernetes certification or experience with classified environments such as IL4, IL5, or IL6.Experience working in Agile environments.