We're seeking an experienced Elastic Subject Matter Expert (SME) to join our team supporting a Department of Defense customer at Fort Belvoir, VA. This role will lead the planning, design, and implementation of Elastic SIEM as part of a large-scale migration from Splunk. We're looking for someone with deep expertise in the Elastic Stack-Elasticsearch, Kibana, Logstash, and Beats-and strong knowledge of SIEM architecture, data ingestion, and threat detection in secure environments. Key responsibilities include:
Designing the Elastic SIEM environment and integrating with existing data sources.
Leading deployment, configuration, and optimization efforts.
Overseeing testing and production rollout.
Providing training and documentation to ensure successful adoption. Requirements:
Active Top Secret/SCI clearance.
15+ years in IT and cybersecurity (10+ years in SIEM, with Elastic Stack expertise).
IAT III baseline certification (e.g., CISSP or equivalent).
Experience with Splunk-to-Elastic migration is highly desirable. If you're ready to tackle this challenge and help drive mission-critical security operations, please let me know a good time for us to connect.
Read Less
