Senior SIEM Engineer at Nastech Global Fort Belvoir, VA

Overview

Senior SIEM Engineer job at Nastech Global. Fort Belvoir, VA.

• Job Title: Sr. SIEM Engineer (Elastic+Confluence)
• Location: 5 days onsite in Ft. Belvoir, VA
• Duration: Long-term Contract
• Job Type: Contract W2
• Citizenship: US Citizen (able to obtain Secret Clearance)

• Elastic
• Confluence
• Security+ or any IAT Level II Cert
• SIEM experience

• A Secret clearance will be required to maintain this position
• Compliance with DoD 8140 / 8570 IAT Level II certification prior to start date
• At least 5 years of hands-on experience in deployment, configuration, and solution development using the Elastic Stack for security and logging use-cases. Specific experience with Elastic SIEM is a plus
• Demonstrated experience with the full Elastic Stack - Elasticsearch, Logstash, Kibana, Beats, Machine Learning, and REST API integration
• Experience integrating Elasticsearch with external systems (e.g., SOAR tools, Threat Intel Platforms)
• Experience with data management: hot/warm/cold architectures, shard allocation/re-allocation, snapshots & restoration
• Strong experience with evaluating existing Elastic clusters, configuration parameters, indexing, search, and query performance tuning, security, and cluster administration
• Experience integrating Elasticsearch with alternate authentication mechanisms such as SAML, LDAP, and PKI
• Experience with supporting the Elastic Stack in on-prem and SaaS environments, including system monitoring and tuning

Thanks and Regards,
Murali Sharma