Elastic SME

Other Jobs To Apply

Description

Leading with our people, Digital Consultants mission is to deliver the highest level of professional solutions while being a trusted partner and advisor to our customers. With a culture of practicality, opportunity, and creativity we remain dedicated to being honest, trustworthy, respectful, and ethical in everything we do. We are a certified SBA 8(a) small, disadvantaged business that supports multiple IT customers within the Federal, civilian and private sectors. Digital Consultants also offers our employees growth opportunities, competitive wages, and a full benefits package. Our founding principles, Fairness and Common Sense, make working here more than a job, it’s the Digital family.


Digital Consultants is seeking an experienced Elastic Subject Matter Expert (SME) to lead and coordinate the planning, design, and implementation of the Elastic SIEM for a DoD customer’s projects. This role involves supporting a large-scale migration from Splunk and requires technical expertise in the Elastic Stack, a deep understanding of SIEM architecture, and hands-on experience with data ingestion, configuration, tuning, and monitoring in secure environments.


Duties to include:

  • Define project goals and objectives, and review existing Splunk environments, identifying elements for migration. Analyze and document source types, sources, knowledge objects, dashboards, and searches for transition.
  • Lead the design phase, determining migration criteria and architectural best practices. Outline data source requirements, working closely with security, network, and application teams to ensure integration.
  • Deploy and configure Elastic Stack components, including Elasticsearch, Kibana, and machine learning nodes. Benchmark and tune the system for optimal performance, ensuring scalability and security.
  • Set up data collection pipelines, configure data ingestion, and implement relevant beats and Elastic agents. Define and refine rules, alerts, and custom dashboards tailored to the organization’s security requirements.
  • Oversee testing phases to validate Elastic SIEM functionality, ensuring it meets security visibility, threat detection, and compliance goals.
  • Manage Elastic SIEM deployment into production, establish monitoring protocols, and perform regular updates. Continuously optimize system performance and address emerging security challenges.
  • Provide hands-on training, documentation, and resources to staff on Elastic SIEM operations, alert management, and incident response.


Requirements

  • Clearance: Top Secret/SCI
  • Education: Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.

Certifications:

  • Advanced certifications in Elastic Stack or SIEM are preferred
  • IAT III Baseline Certification (CISSP or equivalent) with appropriate work role certifications

Experience:

  • 15 years overall experience in information technology and cybersecurity
  • 10-15 years in SIEM deployment, with specific expertise in Elastic Stack; prior experience with Splunk-to-Elastic migration is highly desirable.
  • Expert knowledge in Elastic Stack (Elasticsearch, Kibana, Logstash, Beats).
  • Strong knowledge of security information and event management (SIEM) systems, data pipelines, and threat detection methodologies.
  • Hands-on experience configuring, tuning, and monitoring Elasticsearch clusters, along with custom alerting and dashboard creation.

Required Technical Skills:

  • Proficiency in Elasticsearch, including data modeling, querying, and performance tuning.
  • Experience with Logstash for data ingestion and transformation.
  • Knowledge of Kibana for data visualization and dashboard creation.
  • Familiarity with other related technologies such as Kafka, Hadoop, and Spark.
  • Experience in designing and implementing scalable, distributed systems using the ELK stack.
  • Skills in performance tuning and optimization of Elasticsearch clusters.
  • Experience with cloud platforms like AWS, Azure, or Google Cloud for deploying and managing the ELK stack.
  • Proficiency in programming languages such as Python, Java, or Scala.
  • Experience with DevOps practices and tools like Jenkins, Docker, and Kubernetes for continuous integration and deployment.
  • Knowledge of securing Elasticsearch clusters and implementing best practices for data security.
  • Strong analytical and problem-solving skills to troubleshoot and resolve issues.
  • Excellent communication skills to collaborate with cross-functional teams and stakeholders.
  • Ability to work effectively in a team environment and mentor junior team members.
  • Physical: The candidate, with or without reasonable accommodation, must physically be able to sit or stand for extended periods of time; lift objects up to 20 pounds; require frequent physical hand dexterity and repetitive movements.

Compensation and Benefits: The salary range for this position is $200,000 - 220,000.

The company offers the following benefits to permanent, full-time employees:

  • Paid Time Off (PTO)
  • Group health plans
  • Income protection and supplemental benefits
  • 401(k) plan with company matching Health Savings Account (HSA)
  • Flexible Spending Account (FSA)
  • Pet insurance options
  • Employee Assistance Program (EAP)


Digital Consultants, an inclusive and welcoming company, is fully committed to hiring and retaining a diverse workforce without regard to race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), genetic information, national origin, age (40 or older), disability, Veterans status or any other protected characteristic.


We provide reasonable accommodations to individuals who need assistance during any part of the employment process. If you need assistance navigating Digital Consultants job openings or applying for a position, please send an email to recruiting@digiconintl.com or call 571-306-3444. Please provide your contact information and let us know how we can assist you.

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...

Related Posts

Data Entry Question and Answer

$150 $49

Remote Question and Answer

$150 $49

Virtual Assistant Question and Answer

$150 $49

Content Moderator Question and Answer

$150 $49

Customer Service Question and Answer

$150 $49

Video Game Tester Question and Answer

$150 $49