5+ years of experience with SIEM platforms such as Elastic Security, Kibana, Splunk Enterprise Security, Sentinel, or Chronicle
3+ years of experience designing data pipeline architectures for security operations, including log collection, normalization, enrichment, and routing
2+ years of experience with Elastic Stack, Logstash, Elasticsearch, Kibana, and Agents, including installing, configuring, maintaining, upgrading, and troubleshooting these products
Experience deploying platforms across cloud, on-premises, and disconnected environments using Kubernetes or Docker
Experience with configuration management or DevOps tooling, including Ansible, Puppet, Chef, or Terraform
Experience working in highly structured, controlled, classified or compartmented environments with strict access enforcement
Knowledge of hot-warm-cold-frozen data tiering, blob storage, and index lifecycle strategies
Knowledge of ingest pipelines, enrichment, and cluster monitoring tools
Top Secret clearance
HS diploma or GED
Top Secret clearance is required.
We will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud.
You are expected to be on camera during interviews and assessments.
We reserve the right to take your picture to verify your identity and prevent fraud.
