Elastic Engineer
Western Province, Colombo, Sri Lanka
Jolera
Transform your IT operations into seamless, efficient, and secure environments. Empower your business with innovative solutions and support.Who You AreWe are seeking an energetic, passionate individual with strong communication skills and the ability to work collaboratively. You are a self-starter who thrives in an environment of personal accountability and enjoys being part of a challenging outcome orientated culture. You want to build your career by digging in being a part of a high-performance team where there is an opportunity to up your game, sharing your knowledge and working with some of the best in the business.
What You Will Do
You are passionate about Cybersecurity and have experience building and deploying distributed ELK (Elasticsearch, Logstash, and Kibana) stacks. You will help develop, enhance, design, deploy, and maintain our cyber programs, data analytics, threat hunting, and machine learning modules.
- Be the primary subject matter expert for log ingestion/analysis.
- Develop ELK stacks as infrastructure as code.
- Implement Logstash configuration files, set up data pipelines for various log types such as Syslog.
- Design, access, and maintain data stores, feeds, and associated tools based on ELK to fully integrate environments with multiple data sources including third-party applications.
- Develop automation scripts to identify anomalies and visualize them in Kibana.
- Identify, design, and implement improvements such as automating manual processes, optimize delivery of data, and re-design infrastructure as required.
- Assist in the development of network intrusion analytics as part of a larger team.
- Configure and maintain Linux-based OS in support of ELK stack.
- Document the installation and configuration for production deployments.
Qualifications
- Elastic Certified Engineer.
- Ability to configure, maintain, and troubleshoot multiple Elastic environments at on-premise and Elastic-Cloud.
- Experience with Elastic Stack architecture, design, and deployment.
- Deep understanding of Elasticsearch internals, including indexing, search, and data aggregation.
- Skills in managing enterprise level Elasticsearch clusters, handling cluster health, performance tuning, scaling, and ensuring high availability.
- Proficiency in Elasticsearch Query DSL for complex queries, aggregations, and data analytics.
- Proficiency in programming languages such as Java, Python, or Ruby. Knowledge of scripting languages for automation is also beneficial.
- Proven track record working in cybersecurity, understanding common attack vectors, threat landscapes, and defensive technologies.
- Proficiency in implementing security measures within Elasticsearch, such as role-based access control, encryption, index security, and audit logging.
- Skills in managing and analyzing logs and security events from various sources (firewalls, IDS/IPS systems, network devices, operating systems) using the ELK stack.
- Advanced ability to craft complex queries, alerts, and visualizations tailored for cybersecurity needs, such as detecting anomalies and potential threats.
- Proficiency in data parsing using GROK/DISSECT, ingestion, and ETL workflows.
- Expertise in developing complex Elasticsearch Watchers.
- Experience in Elastic Security, Detection Rules, Machine Learning and AI Assistant.
- Proficiency in developing Elasticsearch solutions to specific security needs, such as custom dashboards and reports for ongoing monitoring.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Analytics Automation Cloud Data Analytics Elasticsearch ELK Encryption Firewalls IDS IPS Java Linux Machine Learning Monitoring Python Ruby Scripting
Perks/benefits: Career development Team events
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.