Senior Software Developer; USIEM

Job Description

Everforth ECS is seeking a Senior Software Developer (USIEM) to work remotely. The Senior Software Developer will support ECS’s AESS program and work in a multi-disciplined team to design, build, secure, maintain, optimize, and document Elastic Stack Enterprise solutions (Elasticsearch, Logstash, Kibana, Beats, ML, SIEM) deployed globally in a Federal DoD environment. The role also includes support using Ansible playbooks, continuous data normalization, and creation of written technical deliverables such as SOPs and process workflows.

Salary Range: $160,000 - $180,000

• Minimum Secret clearance
• Compliance with DoD 8140 / 8570 IAT Level II certification prior to start date
• Certified Elastic Engineer or willingness to gain certification within 90 days of hire
• At least 4 years of hands‑on experience in deployment, configuration, and solution development using the Elastic Stack for security and logging use‑cases; experience with Elastic SIEM is a plus
• Demonstrated experience with the full Elastic Stack – Elasticsearch, Logstash, Kibana, Beats, Machine Learning, and REST API integration
• Demonstrated ability to utilize Ansible Playbook

• Experience integrating Elasticsearch with external systems (e.g. SOAR tools, Threat Intel Platforms)
• Experience with data management: hot/warm/cold architectures, shard allocation/re‑allocation, snapshots & restoration
• Strong experience with evaluating existing Elastic clusters, configuration parameters, indexing, search and query performance tuning, security, and cluster administration
• Experience integrating Elasticsearch with alternate authentication mechanisms such as SAML, LDAP, and PKI
• Experience supporting the Elastic Stack in on‑prem and SaaS environments including system monitoring and tuning
• Experience securing the Elastic Stack and hardening hosting environments
• Experience developing in multiple languages (Python, Bash, Power Shell, Painless, etc.)
• Experience with the design and implementation of highly scalable solutions using the Elastic Stack
• Experience in developing data structures, data mapping from various sources to achieve data normalization using Elastic Common Schema
• Experience developing Logstash and/or Ingest pipelines
• Experience developing custom visualizations and dashboards using Kibana
• Experience developing custom reporting solutions using APIs that leverage Elasticsearch and Elasti Cache
• Experience in end‑to‑end low‑level design, development, administration, and delivery of Elasticsearch‑based reporting solutions
• Strong technical foundation in building reliable, scalable, and supportable systems
• Experience in Red Hat Enterprise Linux deployment and administration

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis of any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.