Elastic Security Engineer (Hybrid)

Job Summary: 
We are seeking a skilled and experienced Elastic Security Engineer to join our dynamic team. This role is focused on leveraging the Elastic Stack (Elasticsearch, Kibana, Logstash, and Beats) to enhance security monitoring, incident detection, and response capabilities. The ideal candidate will possess a strong background in Elastic Stack, cybersecurity, and data analytics, with a proven ability to implement and optimize security solutions in complex environments. This is a 16 month contract and has hybrid flexibility.

Responsibilities:

• Elastic Stack Implementation: Design, deploy, and maintain Elastic Stack components, ensuring optimal performance and scalability for security monitoring and analysis.
• Log Management and Parsing: Configure Logstash pipelines and Beats agents to collect, parse, and enrich log data from various sources, including cloud, network, and endpoint systems.
• Data Analysis and Visualization: Build and maintain Kibana dashboards to provide actionable insights into security events, trends, and key performance indicators (KPIs).
• Threat Detection and Alerting: Develop and optimize Elasticsearch queries, alerts, and rules for real-time threat detection and automated incident response.
• Integration: Collaborate with security, IT, and development teams to integrate Elastic Stack with other tools and platforms, such as SIEMs, SOARs, or cloud-native security services.
• Performance Tuning: Conduct regular performance analysis and tuning of Elastic Stack components to ensure efficient indexing, querying, and data retention.
• Security Compliance: Support compliance initiatives by implementing data retention policies, access controls, and auditing mechanisms within the Elastic Stack.
• Incident Response Support: Assist in investigations by querying and analyzing large datasets to identify root causes, lateral movements, and potential vulnerabilities.
• Documentation and Training: Create and maintain documentation for Elastic Stack configurations, best practices, and operational procedures. Provide training to team members on Elastic Stack usage and security practices.