Job Description
Job DescriptionOverview
We are seeking an experienced Elasticsearch Engineer to design, implement, and maintain enterprise-scale Elastic Stack solutions supporting mission-critical cybersecurity operations. This role will focus on building and optimizing security monitoring capabilities, log ingestion pipelines, detection engineering, and advanced analytics within highly secure cloud environments.
The ideal candidate will have deep expertise with the Elastic Stack and experience supporting Security Operations Center (SOC), SIEM, defensive cyber, or enterprise security monitoring environments.
Responsibilities
- Design, deploy, and administer Elastic Stack solutions including:
- Elasticsearch
- Kibana
- Logstash
- Beats
- Fleet
- Build and maintain Kibana dashboards, visualizations, and security analytics workflows.
- Develop and optimize log ingestion pipelines for network, endpoint, identity, and cloud data sources.
- Manage Elasticsearch index lifecycle policies, templates, and data streams at scale.
- Implement and support Elastic Security detection rules, alerts, and case management workflows.
- Normalize and enrich data using Elastic Common Schema (ECS).
- Support threat hunting, incident response, and security monitoring operations.
- Optimize log collection and analytics for AWS-based environments.
- Collaborate with cybersecurity teams to improve detection coverage and operational visibility.
- Provide technical leadership and mentorship to junior engineers and team members.
- Assist with the integration of emerging AI and machine learning capabilities into security operations.
Required Qualifications
- 5+ years of experience administering Elastic Stack technologies.
- Experience with Elasticsearch, Kibana, Logstash, Beats, and Fleet.
- Experience managing:
- Index Lifecycle Management (ILM)
- Index templates
- Data streams
- Large-scale log retention strategies
- Experience building security dashboards and visualizations in Kibana.
- Experience with Elastic Security detections, alerts, and case management.
- Experience designing and maintaining log ingestion pipelines.
- Knowledge of Elastic Common Schema (ECS).
- Experience supporting SIEM, SOC, defensive cyber, or security operations environments.
- Experience optimizing logging and monitoring in AWS environments.
- Understanding of security analytics concepts including anomaly detection and threat scoring.
- Ability to obtain a Secret Clearance.
- Bachelor's Degree or equivalent experience.
Preferred Qualifications
- Experience supporting Department of Defense environments.
- Experience with Elasticsearch Query Language (ES|QL) and Event Query Language (EQL).
- Experience with Elastic Machine Learning capabilities and User & Entity Behavior Analytics (UEBA).
- Experience implementing advanced threat hunting and detection engineering workflows.
- Knowledge of AI-assisted security operations and LLM integrations.
- Python experience, including machine learning frameworks such as scikit-learn or PyTorch.
- Experience with Elastic Agent fleet management and custom integrations.
- Experience supporting multi-classification cloud environments.
- Experience working within Agile development teams.
- Kubernetes certifications or practical Kubernetes platform experience.
Desired Technical Skills
- Elasticsearch
- ELK Stack
- Kibana
- Logstash
- Beats
- Fleet
- Elastic Security
- SIEM Engineering
- Threat Hunting
- Detection Engineering
- AWS
- Python
- ECS
- ES|QL
- EQL
- Kubernetes
- Security Operations (SOC)
What You'll Gain
- Opportunity to build and enhance enterprise-scale cybersecurity monitoring solutions.
- Exposure to cutting-edge security analytics, automation, and AI-enabled capabilities.
- Direct impact on the security and resilience of mission-critical environments.
- Collaboration with highly skilled cloud, cybersecurity, and engineering professionals.
Job Type & Location
This is a Permanent position based out of Lincoln, MA.
Pay and Benefits
The pay range for this position is $120000.00 - $250000.00/yr.
Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.
see document via email. Full benefits, 401K, vacation
Job Type & Location
This is a Permanent position based out of Lincoln, MA.
Application Deadline
This position is anticipated to close on Oct 29, 2026.
Workplace Type
This is a fully onsite position in Lincoln,MA.
About TEKsystems
We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.
The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
About TEKsystems and TEKsystems Global Services
Were a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. Were a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. Were strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. Were building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.
The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.
Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.