> Markdown version of [/jobs/ext/461823-elastic-siem-engineer](https://www.wearedevelopers.com/jobs/ext/461823-elastic-siem-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Elastic SIEM Engineer

- **Company:** Insight Global
- **Location:** Hampton, VA, United States
- **Experience:** Experienced
- **Salary:** $104,000.0 - $145,600.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Elasticsearch, Machine Learning, Security Information and Event Management, Data Ingestion, SC Clearance, Kibana
- **Published:** June 2, 2026
- **Apply:** https://dejobs.org/x/x/6428365B83144EA19B858AA6B1A1F826/job/

## About the Role

3+ years administering Elastic Stack in security/SIEM environments

Deep experience with Elasticsearch lifecycle management, ECS-based log normalization, and Kibana security analytics

Hands-on with Elastic Security detections, alerting, and case workflows

Proven ability to design and operate log ingestion pipelines across network, endpoint, identity, and cloud sources

Experience supporting DoD, IC, or federal SOC/SIEM operations

Familiarity with AI/ML-driven security analytics (anomaly detection, behavioral analysis, threat scoring)

Active Secret clearance, bachelor's degree, on-site availability, up to 25% travel

## Description

Design, operate, and continuously enhance an Elastic-based SIEM by ingesting and normalizing diverse security telemetry, building advanced detections and dashboards, and enabling SOC teams to detect, investigate, and respond to threats in a classified federal environment


## Related Videos

- [Add Location-based Searching to Site with ElasticSearch](https://www.wearedevelopers.com/videos/77-add-location-based-searching-to-site-with-elasticsearch)
- [Debug a Kubernetes Operator](https://www.wearedevelopers.com/videos/487-debug-a-kubernetes-operator)
- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)
- [Serverless Observability: where SLOs meet transforms](https://www.wearedevelopers.com/videos/854-serverless-observability-where-slos-meet-transforms)
- [Make Your Data FABulous](https://www.wearedevelopers.com/videos/430-make-your-data-fabulous)
- [Designing UX for SRE Agents in High-Stakes Incidents](https://www.wearedevelopers.com/videos/100003-designing-ux-for-sre-agents-in-high-stakes-incidents)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)