Senior Elastic Engineer

This is a fully remote position, open to applicants in Maryland.

📋 Description

• Take charge of the Elastic Stack (Elasticsearch, Logstash, Beats/Elastic Agent, Kibana) to support the ingestion, detection, and search of high-volume security telemetry.

• Direct experience with ECK is essential.

• Create data models, manage index lifecycle management (ILM) strategies, sharding, and establish hot-warm-cold tiering for petabyte-scale, multi-tenant security data.

• Develop and enhance ingestion pipelines from EDR, network, cloud, and log sources into the Elastic Stack, collaborating closely with detection engineering.

• Optimize cluster performance — including query latency, indexing throughput, and resource allocation — and lead capacity planning efforts for future growth.

• Oversee the security, upgrades, and reliability of the Elastic Stack, which includes maintaining runbooks, monitoring, and incident response protocols for the platform.

• Assess and implement new Elastic features (e.g., Elastic Security, ES|QL, machine learning jobs) that enhance detection efficiency and improve the experience for analysts.

• Provide technical leadership and mentorship to a small team of Elastic engineers, setting standards, review procedures, and an on-call structure for the platform.

• Document architectural decisions, standards, and best practices, while representing the Elastic platform in cross-functional planning and discussions with vendors (Elastic).

⛳️ Requirements

• Over 7 years of experience in search/data engineering or infrastructure roles, including more than 6 years of hands-on architecture experience with Elasticsearch/Elastic Stack.

• Extensive knowledge of Elasticsearch internals: sharding, replication, ILM, mapping/index design, query DSL and/or ES|QL, and performance tuning for clusters at scale.

• Proven experience in building ingestion pipelines utilizing Logstash, Beats, or Elastic Agent, preferably with security/log data (SIEM, EDR, cloud logs).

• Proficient in operating Elastic within both private and public cloud environments (AWS/Azure) and familiar with containerization (Docker/Kubernetes) and infrastructure-as-code practices.

• Familiarity with security operations concepts (detections, alerting, SIEM workflows) is highly advantageous.

• Competence in scripting/programming (Python, Go, or similar) for automation and tooling purposes.

• Elastic Certified Engineer certification is a bonus, but not mandatory.

🏝️ Benefits

• Flexible Paid Time Off

• 401k with a company match

• Medical, Dental, and Vision Coverage

• Voluntary Short Term and Long-Term Disability

• Employee Assistance Program with Mental Health Supplement

• Voluntary Basic, Accidental, and other ancillary life insurance

• Health Savings Account Contribution (with selection of a HDHP)

• 10 annual, paid holidays