Elastic Security Engineer

Elastic Security Engineer

Long Term contact in Great Neck NY

Qualifications

Required

• 5+ years of experience in cybersecurity with focus on SIEM/EDR technologies
• Demonstrated expertise with Elastic Security, including SIEM, Elastic Defend (EDR), and the Elastic Stack (Elasticsearch, Kibana)
• Strong understanding of endpoint security, threat detection, and incident response methodologies
• Experience with data ingestion using Elastic Agent, Beats, Logstash, and Fleet management
• Proficiency in KQL (Kibana Query Language) and ES|QL for detection and investigation
• Proficiency in at least one scripting language (Python, PowerShell, Bash)
• Knowledge of MITRE ATT&CK framework and adversary TTPs
• Excellent communication skills for technical and non-technical stakeholders
• Ability to work independently and lead technical conversations

Preferred

• Elastic Certified Engineer or Elastic Certified Analyst certification
• Elastic Certified SIEM Analyst certification
• Experience with cloud security (AWS, Azure, Google Cloud Platform) and Elastic's CSPM/KSPM capabilities
• Background in SOC operations, threat hunting, or security consulting
• Experience with machine learning-based anomaly detection and behavioral analytics
• Familiarity with security orchestration and automation (SOAR) platforms
• Relevant certifications: GIAC (GCIH, GCIA), OSCP, or equivalent