Senior Security Integration Engineer (Elastic Stack)

KIHOMAC, Inc.
Huntsville, AL, United States
2 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
2 years minimum
Compensation
$130,000.0 - $150,000.0
Working hours
Regular working hours
Job source

Tech stack

Amazon Web Services Microsoft Azure Bash Shell Cisco Routers Command-Line Interface Cloud Engineering Data Validation Data Normalization Linux Elasticsearch Identity and Access Management Intrusion Detection and Prevention
+26 more
Virtual Private Networks (VPN) Python (Programming Language) Network Security Microsoft Visio Network Architecture Network Diagrams Network Planning and Design Routing Windows PowerShell Lucidchart Security Information and Event Management Virtual Machines Software Vulnerability Management Data Logging Scripting Computer Networking Systems Google Cloud In-Plane Switching (IPS) Data Ingestion Mitre Att&ck Cyber Threat Analysis Firewalls (Computer Science) SolarWinds (Software) Cybercrime Cisco Vmware

Job description

  • Demonstrate a firm understanding of network architectures including Cisco routers, switches, firewalls, IPS, and internal and external routing to delegate tasks to network engineering team
  • Work directly with corresponding Team Leads, Project Managers, Network Engineers, and Network Architect for coordination of routine maintenance, break/fix repair, and planned changes, coordinating any down time with all appropriate leadership and stakeholders
  • Perform end-user support to internal teammates and tenants/performers alike, including but not limited to Layer 1-3 troubleshooting, physical fault isolation cabling, etc.
  • Generate network design guidance in coordination with architects, SMEs, and system engineers; along with the installation/deployment, configuration, testing, compliance enforcement, and reporting on MDSEA assets to include Cisco, Gigamon, and Riverbed hardware, along with the associated software suites and those of VMware NSX/ vCenter, SolarWinds, and other tools as necessary as well as assure and sustain the integrity and security of network infrastructure
  • Update documentation (network diagrams, rack diagrams, etc.) utilizing approved work vehicles and the change management process
  • Perform hardening and STIG checklist validation/verification for associated network infrastructure and virtual machines
  • Provide mentorship and training to junior/mid engineers to ensure their participation in experience-gathering day-to-day activities, and review work products and efforts during their development
  • Other duties as assigned

Requirements

Do you have experience in Visio?, + Bachelor’s degree in relevant engineering or science discipline preferred

  • Active CCNA, CySA+, GSEC, or Security+ certification required
  • Elastic Certified Engineer, Elastic Certified Analyst, or relevant Elastic certifications preferred

Experience: *

  • 10+ years of general (full-time) work experience required
  • 5+ years of directly related experience required
  • 2+ years of experience in a management or leadership role required
  • Must have a strong understanding of enterprise networks, including routing, switching, VPNs, firewalls, and network security tools
  • Experience with data ingestion, processing, and enrichment techniques required
  • Ability to build and maintain network and data flow diagrams (e.g., Visio, Lucidchart, Draw.io)
  • Proficiency in Linux systems, command-line tools, and system administration fundamentals required
  • Experience working directly with customers in a technical consulting or engineering capacity required
  • Experience with cloud platforms and logging pipelines (AWS, Azure, GCP, cloud-native telemetry) preferred
  • Familiarity with ECS (Elastic Common Schema) and data normalization best practices preferred
  • Experience implementing detection engineering or threat hunting workflows in Elastic Security preferred
  • Knowledge of scripting languages (Python, PowerShell, Bash) to automate ingestion and data validation preferred
  • Experience integrating EDR, NDR, IAM, and vulnerability management logs into a SIEM preferred
  • Understanding of MITRE ATT&CK, cyber kill chain, and threat intelligence ingestion preferred
  • Experience mentoring or leading small technical teams preferred

Security:

  • Must be a US citizen
  • Candidate must be in possession of a minimum DoD issued Secret Clearance

Physical Requirements:

  • Able to occasionally reach with hands and arms
  • Prolonged periods of computer screen use, while sitting or standing at a desk
  • Adhere to safety protocols when in work areas requiring use of PPE (e.g. eyewear, gloves, masks, hearing protection, steel toed shoes, etc.)
  • Able to safely lift and carry up to 20 pounds at a time

Benefits & conditions

Pulled from the full job description

  • AD&D insurance
  • 401(k)
  • Health insurance
  • Paid time off
  • Vision insurance
  • Dental insurance
  • Life insurance, * Health Care Plan (Medical, Dental & Vision)
  • Retirement Plan (401k, IRA)
  • Life Insurance (Basic, Voluntary & AD&D)
  • Paid Time Off (Vacation, Sick & Public Holidays)
  • Short Term & Long Term Disability
  • Training & Development
  • Wellness Resources

Salary: $130,000 - 150,000

Salary rates for this position are competitive and commensurate with experience and industry standards. We offer a comprehensive benefits package that may include health insurance, paid time off, and retirement savings options.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

1:40 min

Managing containerized infrastructure with Podman Desktop

Cedric Clyburn Cedric Clyburn +1 · WWC 2025

52 sec

Running persistent Linux environments directly on Windows

Ben Breard Ben Breard · WWC 2025

1:29 min

Expanding practical knowledge with community sandboxes and resources

Stuart Clark · LIVE

10:42 min

Essential soft skills and evaluating security candidates

Kurt Eder · LIVE

1:41 min

Parallels between cloud and legacy infrastructure lock-ins

Björn Stahl Björn Stahl · WWC 2024

Videos

See all

Related articles

See all