Job Description
Day-to-day (~30% SIEM, ~30% Platform, ~30% AWS, ~10% Coordination):
Deploy and operate Elastic Security clusters across AWS GovCloud and on-prem environments
Build and maintain the underlying infrastructure—EKS clusters, Terraform modules, CI/CD
pipelines
Onboard log sources, build ingest pipelines, and create detection content that actually catches
things
Troubleshoot the full stack—from AWS networking to Kubernetes pods to Elasticsearch
performance
Work with SOC analysts to tune alerts, reduce noise, and improve detection coverage
Document architectures and participate in RMF/ATO activities (you won't own this, but you'll
contribute)
Coordinate with vendors, government stakeholders, and cross-functional teams

PAY RATE $60-80/HR

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative actio...