Apply on Employer Site

Blackstone Talent Group · 5 days ago

Senior Elastic Engineer (EDR/Defend Focus)

Colorado Springs, CO

Full-time

Onsite

Senior Level, Lead/Staff

10+ years exp

Blackstone Talent Group is an award-winning technology consulting and talent agency seeking a Senior Elastic Engineer (EDR/Defend Focus) to join their Client's team. The role involves supporting the Missile Defense Agency by designing, implementing, and maintaining the Elastic Stack environment, focusing on enhancing cybersecurity posture with Elastic EDR and Defend capabilities.

ConsultingHuman ResourcesRecruitingStaffing Agency

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Architect, deploy, and maintain a highly available and scalable Elastic Stack environment, specializing in Elastic EDR/Defend

Configure and optimize Elastic EDR/Defend policies and data pipelines for threat detection, prevention, and security event enrichment

Develop and maintain Kibana dashboards and visualizations for real-time security monitoring, threat identification, and incident response tracking

Perform proactive threat hunting and in-depth security analysis using Elastic EDR/Defend capabilities

Troubleshoot complex Elastic Stack issues, develop comprehensive documentation, and mentor junior engineers to ensure operational excellence

Qualification

Elastic StackElastic EDR/DefendSecurity principlesData indexingLinux operating systemWindows operating systemNetwork protocolsSecurity frameworksScripting languageCommunication skillsInterpersonal skillsTeamwork

Required

Expert knowledge of the Elastic Stack (Elasticsearch, Logstash, Kibana)

Expert knowledge of Elastic EDR and Defend capabilities

Strong understanding of data indexing, sharding, replication, and data lifecycle management

Strong understanding of Linux and Windows operating systems

Strong understanding of security principles, threat detection, and incident response

Knowledge of common coding flaws and security vulnerabilities

Knowledge of network protocols and security concepts

Knowledge of security frameworks and compliance standards (e.g., NIST, FedRAMP)

Ability to interpret and incorporate data from multiple tool sources

Ability to analyze complex requirements and translate them into clear, actionable tasks

Ability to work independently and as part of a team

Excellent communication and interpersonal skills

Must have 10, or more, years of general (full-time) work experience

Must have 5, or more, years of experience working with the Elastic Stack (Elasticsearch, Logstash, Kibana)

Must have 3, or more, years of experience specifically implementing and managing Elastic EDR and Defend solutions

Must have 2, or more, years of experience in a lead or senior role, mentoring and guiding other team members

Must have 1, or more, years of experience working in a management or leadership role

Must have a strong understanding of security principles, threat detection, and incident response

Must have experience with data ingestion, processing, and enrichment techniques

Must be proficient in at least one scripting language (e.g., Python, Bash, PowerShell)

Must have a current DoD 8570.01-M IAT Level II certification with Continuing Education (CE) - (CCNA-Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP)

Must have an active DoD Secret Security Clearance

Must be able to obtain an active DoD Top Secret Security Clearance