> Markdown version of [/jobs/ext/1313842-elastic-engineer-security](https://www.wearedevelopers.com/jobs/ext/1313842-elastic-engineer-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Elastic Engineer - Security - **Company:** THE JUDGE GROUP, INC. - **Location:** Lampeter, PA, United States - **Experience:** Experienced - **Salary:** $176,800.0 - $187,200.0 - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Artificial Intelligence, Microsoft Azure, Cloud Computing Security, Cyber Security, Computer Programming, Intrusion Detection and Prevention, Python (Programming Language), Machine Learning, Windows PowerShell, Security Information and Event Management, Software Engineering, Cloud Platform System, Mitre Att&ck, Software Troubleshooting, Cyber Threat Analysis, Cybercrime, Data Pipelines, Security Orchestration, Automation & Response, Golang - **Published:** July 17, 2026 - **Apply:** https://www.dice.com/job-detail/32db68e8-f1bd-4d77-8135-691cafac19ff ## About the Role * 3-7+ years of software engineering experience. * Hands-on experience with Elastic Security or Elastic Observability. * Strong SIEM experience, preferably within Elastic environments. * Experience with: + Data source and log ingestion + Dashboards and visualizations + Detection rules and alerts + Machine learning and anomaly detection + Actions and outbound connectors * Experience deploying and managing: + Elastic Agent + Fleet + Cross-Cluster Search * Experience with Elastic AI capabilities, especially Attack Discovery. * Knowledge of cloud architectures and hyperscalers, particularly Microsoft Azure. * Cybersecurity background including: + Threat Intelligence + XDR/EDR technologies + MITRE ATT&CK framework * Strong troubleshooting, problem-solving, and collaboration skills., * Elastic Certified Engineer, Elastic Certified Analyst, or other Elastic certifications. * Security certifications such as Security+, CySA+, CISSP, GIAC, or equivalent. * Experience with security automation and orchestration. * Knowledge of scripting and programming languages such as Python, Java, Go, or PowerShell. * Experience supporting large-scale enterprise security monitoring environments. What You'll Bring * Passion for cybersecurity and threat detection. * Strong engineering mindset with a focus on automation and scalability. * Ability to work across security, cloud, and development teams. * Excellent communication and stakeholder management skills. * Continuous learning mindset focused on emerging threats and technologies. ## Description We are seeking a Software Engineer, Cybersecurity with strong experience in Elastic Security and/or Elastic Observability to help design, implement, and optimize enterprise security monitoring and detection capabilities. This role will focus on building scalable security solutions, enhancing SIEM operations, developing detection content, and leveraging advanced analytics and machine learning to identify and respond to cyber threats. The ideal candidate has a blend of software engineering, cloud security, and cybersecurity expertise, with hands-on experience deploying and managing Elastic-based security solutions. Responsibilities * Design, develop, and maintain security monitoring solutions within the Elastic platform. * Build and optimize data ingestion pipelines for logs, events, and telemetry from multiple sources. * Develop dashboards, visualizations, and reporting capabilities to support security operations. * Create, tune, and maintain detection rules, alerts, and automated response workflows. * Implement and enhance machine learning and anomaly detection capabilities. * Configure and manage Elastic Agents and Fleet deployments. * Integrate security tools and third-party technologies using actions and outbound connectors. * Leverage Elastic AI capabilities, including Attack Discovery and AI Assistants, to improve threat detection and investigations. * Support Cross-Cluster Search implementations for enterprise-scale visibility. * Collaborate with security operations, threat intelligence, and engineering teams to improve detection coverage. * Align detection strategies with the MITRE ATT&CK framework. * Contribute to automation and software engineering initiatives that enhance security operations. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) - [Retooling and refactoring - an investment in people.](https://www.wearedevelopers.com/videos/371-retooling-and-refactoring-an-investment-in-people) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)