Elasticsearch Developer

Secure our Nation, Ignite your Future

Currently, we are seeking a motivated, career and team-oriented Elasticsearch Developer in support of the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) DEFEND E Program. The CDM DEFEND E Program is a critical component of CISA’s national effort to ensure the defense and resilience of cyberspace. This is a remote position where the candidate can work from any location within the United States provided that they are able to work on an eastern time zone schedule. 

The CDM DEFEND E Program mission is to provide a standardized platform to collect, transform, and integrate cybersecurity data from relevant authoritative data sources into a coherent data, delivering actionable information into Agency and Federal Dashboards to identify risk areas in support of mitigation as well as to facilitate coordinated agency and national response to cyber-threats.   

The Elasticsearch Developer responsibilities include conducting full development lifecycle of data that includes requirements from DHS, other OMB initiatives, and provide support for the whole program. This position also requires building a new data automation practice on the program to address our client’s most pressing needs with Cyber Security Threats and Data. The successful candidate will bring a consultative approach to data to improve the value of the data that’s being collected by our customers. This position is also a thought leader in the practice of Big Data in solving our clients’ cyber security problems, coupled with demonstrated experience designing and developing enterprise data solutions for large clients by providing a new approach to the team, presenting white papers and other solutions. 

Responsibilities include, but are not limited to:

• Develop and implement scripts in python3 / BASH to interact with the Elasticsearch API to configured indices, visualizations, manipulate existing data, and perform complex search queries

• Develop advanced KQL queries to power visualizations, reports, and other use cases as needed

• Develop dynamic Kibana visualizations to display complex analytics of data stored in elastic indices

• Set up and utilize cross cluster search

• Establish streaming data pipelines using Elastic Beats / Agent on endpoints, fleet server, and elastic integrations

• Develop data reporting methodologies within Elastic Cloud Enterprise to advance CDM functionality and usability within Agency environments

• Develop YAML configuration files for standard elasticsearch and containerized elastic platforms

• Develop code to interact with non-Elastic APIs (ie cyber security tools such as Tennable.sc) for purposes of data mining 

• Design and implement ELK (ElasticSearch, Logstash and Kibana) stack solutions

• Support Big Data platform build in the cloud 

• Investigate alternatives for data storing and processing to ensure implementation of the most streamlined solutions 

• Work with Data and Architect team to understand Data that is generated by multiple tools such as Asset Management, Identity Management, Vulnerability management. 

• Develop rules and algorithms for Data processing, transformation, and correlations.

• Work with data stores that support the scalable processing and storage of our high-frequency data 

• Customize integration tools, warehouses, databases, and analytical systems

• Automate manual processes using Python, BASH, PowerShell, or other scripting language

• Review, Identify, Analyze data from multiple source Cyber Security tools at multiple agencies. 

• Interpret data, analyze results using statistical techniques and support data trends based on the customer needs. 

• Develop and implement databases, data collection systems, data analytics and other strategies that optimize statistical efficiency and quality

• Acquire data from primary and other data sources and maintain databases/data systems

• Identify, analyze, and interpret trends or patterns in complex data sets

• Analyze source data and types, identify data requirements for destination systems. 

• Analyze, interpret, and develop data models on data based on Data Dictionary & Logical Data Models guidance. 

• Locate and define new process improvement opportunities

• Ensure that mapping of data elements provided by COTS products to the Logical Data Model

Basic Qualifications:

• Bachelor’s degree complete (or in progress) preferably 9 or more years of relevant experiencein applied mathematics, statistics, computer science, data science, electrical engineering, physics, or closely related field

• Experience with scripting languages like Python, Bash, Powershell, R

• Knowledge of and experience with reporting packages (Business Objects, etc.), databases (SQL, MySql etc.), programming (XML, Javascript, or ETL frameworks)

• Understanding of containerized PaaS platforms such as Azure Kubernetes Service or Elastic Kubernetes Service as well as IaaS hosted platforms such as docker

• Familiarity with the opensource alternatives to licensed Elasticsearch (OpenSearch)

• Proven ability to analyze complex problems, theorize root causes, and develop creative solutions.

• Proven ability to use multiple REST API authentication types, knowledge of REST methods, and ability to mine APIs to meet data requirements.

• Proven ability to analyze complex problems, theorize root causes, and develop creative solutions.

• Experience with database query languages like SQL, T-SQL, KQL

• Basic understanding of API calls for data ingestion.

• Basic Understanding of T-SQL, data-warehousing, and data-modeling techniques

• Operating system experience with Linux

• Proficient at queries, report writing and presenting findings.

• Strong analytical skills with the ability to collect, organize, analyze, and disseminate significant amounts of information with attention to detail and accuracy.

• Experience understanding organizational needs, proposing solutions, and managing project execution efforts designed to deliver overall program benefits for Government Agencies

• Experience collaborating with US Government Agencies, state or local governments, or commercial entities to develop IT service program maturity in accordance with Federal IT mandates and best practices.

• Experience in conducting assessments of an Enterprise by reviewing technical documentation, conducting interviews and workshops to identify gaps and develop a tailored solution is highly desired.

• Demonstrated interest in security solution design using existing as well as emerging technologies to deliver enterprise solutions.

Preferred Qualifications:

• Demonstrated ability to investigate data and present findings to internal teammates and client audiences.

• Desired familiarity with the Elastic Cloud Computer (ECE) and Elastic Cloud on Kubernetes (ECK) platforms

Clearance Requirements:

• Must be a US citizen and pass a background investigation.

• Able to obtain and maintain a DHS Suitability/Entry on Duty (EOD)

Physical Requirements:

• Must be able to be in a stationary position more than 50% of the time 

• Must be able to communicate, converse, and exchange information with peers and senior personnel 

• Constantly operates a computer and other office productivity machinery, such as a computer 

• The person in this position frequently communicates with co-workers, management, and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations 

• The person in this position needs to occasionally move about inside the office to access file cabinets, office machinery, etc.

The projected compensation range for this position is $141,100-$234,400. There are differentiating factors that can impact a final salary/hourly rate, including, but not limited to, Contract Wage Determination, relevant work experience, skills and competencies that align to the specified role, geographic location (For Remote Opportunities), education and certifications as well as Federal Government Contract Labor categories. In addition, ManTech invests in it’s employees beyond just compensation. ManTech’s benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, Short Term and Long Term Disability, Retirement and Savings, Learning and Development opportunities, wellness programs as well as other optional benefit elections.

For all positions requiring access to technology/software source code that is subject to export control laws, employment with the company is contingent on either verifying U.S.-person status or obtaining any necessary license. The applicant will be required to answer certain questions for export control purposes, and that information will be reviewed by compliance personnel to ensure compliance with federal law. ManTech may choose not to apply for a license for such individuals whose access to export-controlled technology or software source code may require authorization and may decline to proceed with an applicant on that basis alone.

ManTech International Corporation, as well as its subsidiaries proactively fulfills its role as an equal opportunity employer. We do not discriminate against any employee or applicant for employment because of race, color, sex, religion, age, sexual orientation, gender identity and expression, national origin, marital status, physical or mental disability, status as a Disabled Veteran, Recently Separated Veteran, Active Duty Wartime or Campaign Badge Veteran, Armed Forces Services Medal, or any other characteristic protected by law.

If you require a reasonable accommodation to apply for a position with ManTech through its online applicant system, please contact ManTech’s Corporate EEO Department at (703) 218-6000. ManTech is an affirmative action/equal opportunity employer – minorities, females, disabled and protected veterans are urged to apply. ManTech’s utilization of any external recruitment or job placement agency is predicated upon its full compliance with our equal opportunity/affirmative action policies. ManTech does not accept resumes from unsolicited recruiting firms. We pay no fees for unsolicited services.

If you are a qualified individual with a disability or a disabled veteran, you have the right to request an accommodation if you are unable or limited in your ability to use or access http://www.mantech.com/careers/Pages/careers.aspx as a result of your disability. To request an accommodation please click [email protected] and provide your name and contact information.