Elastic Cloud Security Engineer

Elastic Cloud Security Engineer The Opportunity: - Designs, implements, integrates, and maintains systems and tools to automate complex cyber activities. - Applies leading-edge principles, theories, and concepts. - Contributes to the development of new principles and concepts. - Works on unusually complex problems and provides highly innovative solutions. - Operates with substantial latitude for unreviewed action or decision. - Mentors or supervises employees in both company and technical competencies. Join us. The world can't wait. You Have: - 5+ years of experience administering Elastic Stack, including Elasticsearch, Kibana, Logstash, Beats, or Fleet - Experience managing Elasticsearch index lifecycle policies, index templates, and data streams at scale, and building Kibana dashboards, visualizations, and lens-based analytics for security operations - Experience with Elastic Security detection rules, alerts, and case management workflows - Experience with log ingestion pipeline design, including parsing, enrichment, and normalization across heterogeneous log sources such as network, endpoint, identity, and cloud - Experience with Elastic Common Schema (ECS) and mapping non-standard log sources into ECS-compliant fields - Experience working in government cybersecurity environments such as SOC, SIEM operations, or defensive cyber - Experience optimizing log collections from AWS platform, endpoints, and network devices - Knowledge of AI/ML concepts as applied to security analytics such as anomaly detection, behavioral baselining, or threat scoring - Secret clearance - Bachelor’s degree Nice If You Have: - Experience working in an agile working environment - Experience working with DoD clients - Experience with Elastic's ML jobs, including for User and Entity Behavior Analytics (UEBA), rare process detection, or anomalous login patterns - Experience with Elastic AI Assistant or integration of LLMs into Elastic Security workflows such as natural language querying and alert triage assistance - Experience building or fine-tuning ML models outside Elastic, including Python, scikit-learn, and PyTorch, for security use cases such as threat detection or lateral movement scoring - Experience with Elastic Agent fleet management at scale, including custom integrations and policy management - Experience with cross-domain data flows and working in multi-classification environments such as IL4, IL5, or IL6 - Experience with ES|QL or EQL for advanced threat hunting and detection-as-code workflows - Kubernetes Certification such as Kubernetes and Cloud Native Certification or Kubernetes Application Developer Certification - Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required. Compensation - At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. - Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. - Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. - We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page. - Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. - The projected compensation range for this position is $112,900.00 to $257,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen’s total compensation package for employees. - This posting will close within 90 days from the Posting Date. Identity Statement - As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. - You are expected to be on camera during interviews and assessments. - We reserve the right to take your picture to verify your identity and prevent fraud. Candidate AI Usage Policy - AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. - However, we want to ensure a fair candidate process based on your own skills and knowledge. - As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided. Work Model - Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. - To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings. Remote - If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility. Hybrid - If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. - You may also be required to work from or visit a customer facility. Onsite - If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role. Commitment to Non-Discrimination - All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.