The Role
Design, maintain, and optimize Elastic-based cybersecurity data pipelines and telemetry ingestion. Process, normalize, enrich, validate, and route data from enterprise, cloud, network, endpoint, and security sources. Manage schemas, mappings, lifecycle strategies, data quality, and high-volume event processing. Troubleshoot ingestion and platform issues while collaborating with cybersecurity analysts and infrastructure teams to support threat detection, incident response, threat hunting, compliance reporting, and operational visibility.
Summary Generated by Built In
Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success!
Job Summary
JCS Solutions' C5ISR Center CSSP Cloud Operations Team is seeking an Elastic Data Engineer to support enterprise cybersecurity operations within a Department of Defense environment. In this role, you will design, maintain, and optimize data-ingestion, analytics, and monitoring capabilities using the Elastic Stack to help drive threat detection, incident response, compliance reporting, and operational visibility.
You will work with cybersecurity and operational telemetry from multiple sources, ensuring data quality, platform performance, and actionable insights for security analysts and stakeholders.
Location: Aldelphi, MD
Clearance Required: Active TS/SCI
Salary Range: $135,000 to $162,000
What’s in it for you:
What you will do:
What you will bring:
How will you wow us:
JCS Solutions (JCS) is a premier technology firm providing innovative solutions and high-quality services in defense, national security, and civilian sectors. JCS offers enterprise-wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers’ mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities.
JCS is both a Great Place to Work and a Top Places to Work certified company.
Our employees embody our core values, and we are looking for others who do too!
At JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $135,000.00 - $162,000.00
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws.
Job Summary
JCS Solutions' C5ISR Center CSSP Cloud Operations Team is seeking an Elastic Data Engineer to support enterprise cybersecurity operations within a Department of Defense environment. In this role, you will design, maintain, and optimize data-ingestion, analytics, and monitoring capabilities using the Elastic Stack to help drive threat detection, incident response, compliance reporting, and operational visibility.
You will work with cybersecurity and operational telemetry from multiple sources, ensuring data quality, platform performance, and actionable insights for security analysts and stakeholders.
Location: Aldelphi, MD
Clearance Required: Active TS/SCI
Salary Range: $135,000 to $162,000
What’s in it for you:
- Join a premier technology firm specializing in innovative solutions.
- Be part of a collaborative, inclusive, and innovative work culture.
- Enjoy tremendous growth potential in a high-performing team environment.
- A robust benefits package:
- Health, dental, and vision insurance
- Life insurance
- Short-and-long term disability
- Paid time off (PTO)
- 401k retirement plan with employer match
- Annual Professional Development Reimbursement Program
- And more!
What you will do:
- Design and maintain data pipelines for cybersecurity, cloud, network, endpoint, application, identity, and infrastructure telemetry.
- Collect, ingest, transform, normalize, enrich, and route structured and unstructured data from enterprise sources.
- Develop and maintain data schemas, mappings, standards, and models, including Elastic Common Schema (ECS) alignment.
- Parse and process complex log formats, including JSON, XML, CSV, syslog, Windows Event Logs, and custom application data.
- Implement data quality controls, validation, cleansing, reconciliation, deduplication, and enrichment processes.
- Build reusable parsing, transformation, and enrichment workflows and integrate data from APIs, databases, cloud services, message queues, files, and security platforms.
- Support high-volume, near-real-time data ingestion and event processing while troubleshooting ingestion, mapping, parsing, and data-quality issues.
- Analyze data flows to identify gaps, bottlenecks, inconsistencies, and source-system issues.
- Collaborate with cybersecurity analysts, detection engineers, and infrastructure teams to onboard data sources and support threat hunting, alerting, incident response, and reporting.
- Document data sources, schemas, lineage, dependencies, governance, retention, classification, and onboarding procedures.
- Use Python, SQL, PowerShell, Bash, Git, and testing practices to support data engineering, automation, validation, and troubleshooting.
- Maintain expertise in cybersecurity telemetry, ETL/ELT processes, APIs, and large-scale event-data management.
What you will bring:
- Strong experience with the Elastic Stack, including Elasticsearch, Logstash, Kibana, Elastic Agent, Fleet, and Beats.
- Experience designing and supporting high-volume logging, cybersecurity telemetry, and data-ingestion pipelines.
- Knowledge of Elasticsearch architecture, including clusters, indices, shards, mappings, templates, data streams, and lifecycle management (ILM).
- Experience processing JSON, XML, CSV, syslog, Windows Event Logs, and other log sources using Logstash filters and ingest pipelines.
- Experience implementing data retention, rollover, and tiered-storage strategies.
- Linux administration and scripting experience using Python, PowerShell, Bash, or similar languages.
- Knowledge of REST APIs, Git, networking, TLS/certificates, and access-control mechanisms.
- Understanding of security monitoring, threat detection, incident response, vulnerability management, with strong troubleshooting, documentation, and communication skills.
- BS degree with 4-8 years of relevant experience, or MS degree with 2-6 years of relevant experience.
- Active DoD TS/SCI clearance or ability to obtain one.
How will you wow us:
- Experience supporting SOC, CSSP, SIEM, or enterprise observability platform.
- Experience with Elastic Security, AWS, AWS GovCloud, Kafka, Docker, or Kubernetes.
- Familiarity with Zero Trust, RMF, DISA STIGs, and federal logging requirements.
- Elastic, AWS, Security+, GIAC, or CISSP certification.
JCS Solutions (JCS) is a premier technology firm providing innovative solutions and high-quality services in defense, national security, and civilian sectors. JCS offers enterprise-wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers’ mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities.
JCS is both a Great Place to Work and a Top Places to Work certified company.
Our employees embody our core values, and we are looking for others who do too!
- Customer Experience: Strive for excellence and delight our clients
- Innovation: Embrace creative thinking to enable continual growth and powerful solutions
- Accountability: Take ownership of and pride in our actions and service delivery
- Inspire: Be inspired to be your best self and have fun in the process
- Integrity: Do the right thing, the right way, every time!
- Stewardship: The careful and responsible management of something entrusted to our care.
At JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $135,000.00 - $162,000.00
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws.
Skills Required
- Strong experience with the Elastic Stack, including Elasticsearch, Logstash, Kibana, Elastic Agent, Fleet, and Beats
- Experience designing and supporting high-volume logging, cybersecurity telemetry, and data-ingestion pipelines
- Knowledge of Elasticsearch architecture, including clusters, indices, shards, mappings, templates, data streams, and lifecycle management
- Experience processing JSON, XML, CSV, syslog, Windows Event Logs, and other log sources
- Experience implementing data retention, rollover, and tiered-storage strategies
- Linux administration and scripting experience using Python, PowerShell, Bash, or similar languages
- Knowledge of REST APIs, Git, networking, TLS/certificates, and access-control mechanisms
- Understanding of security monitoring, threat detection, incident response, and vulnerability management
- Strong troubleshooting, documentation, and communication skills
- Bachelor’s degree with 4–8 years of relevant experience, or master’s degree with 2–6 years of relevant experience
- Active DoD TS/SCI clearance or ability to obtain one
- Experience supporting SOC, CSSP, SIEM, or enterprise observability platforms
- Experience with Elastic Security, AWS, AWS GovCloud, Kafka, Docker, or Kubernetes
- Familiarity with Zero Trust, RMF, DISA STIGs, and federal logging requirements
- Elastic, AWS, Security+, GIAC, or CISSP certification
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
JCS is a premier technology firm specializing in enterprise-wide capabilities, digital transformation, software solutions, and IT services. We hold contracts in support of federal, state, and local government organizations in addition to assisting industry leaders in the private sector. Vision: Elevate the customer, the employee, and the community Mission: Delivering superior, mission-focused technology solutions to empower our clients. Our Services: • IT Services & Solutions • Cyber Security • Advanced Data Analytics • Health IT • Professional Services • Digital Transformation • Partner Network and Technology Certifications JCS is an 8(a) Certified Small Business, Economically Disadvantaged Woman-Owned Small Business (EDWOSB), Minority-Owned Small Business (MOSB), and Small Disadvantaged Business (SDB) based out of the Washington D.C. Metropolitan area. JCS is ISO 9001:2015, ISO/IEC 20000-1: 2018, ISO/IEC 27000: 2013 certified and appraised at CMMI Level 3 for both Development and Services. JCS is a Microsoft Gold and ServiceNow Premium partner. We are also certified as a “Great Place to Work.”
