Consolidated Data Analytics Platform Elastic Engineer
Booz Allen Hamilton · Fort Meade, Maryland, US
Consolidated Data Analytics Platform Elastic Engineer The Opportunity: Work with clients and peers to build a high performing system using Elastic to aggrega...
Job description
Consolidated Data Analytics Platform Elastic Engineer The Opportunity: Work with clients and peers to build a high performing system using Elastic to aggregate logs from many systems into a single common schema. Use Elastic Common Schema (ECS) formatted fields, create quality visualizations and alerts that analyst can use for threat hunting, maintain infrastructure, and identify problems or anomalous behavior before they become a larger issue and can be actioned on. Work with the vendor to determine best practices for deployment and maintenance of system architecture and deploy within designated security requirements. Join us. The world can’t wait. You Have: 2+ years of experience with Elastic Stack, such as Elasticsearch, Logstash, and Kibana tools, including installing, configuring, maintaining, upgrading, and troubleshooting these products 2+ years of experience building high-quality Kibana visualizations and dashboards Experience with log pipelines and interpreting logs to determine information, including converting raw logs into ECS formatted documents Experience with Logstash plugins, filters, regular expressions, and grok patterns Knowledge of cryptography protocols and stan...