Key skills
AnalyticsKubernetesElasticsearchSplunkLogstashKibanaLeadershipCommunication
About this role
CCS Global Tech is a rapidly growing Information Technology company with a diverse portfolio of technology products and services and a large network of industry partnerships. With over 22 years of being a successful business with a global talent pool and presence, CCS is a certified Microsoft Gold Partner and specializes in delivering expert Microsoft based solutions for technical and business needs. We have been recognized by Inc. 500 Magazine as one of the fastest growing small companies in the Unites States.
we are a Tier 1 vendor for the City and County of San Francisco for Cloud Services, Staffing Services and Training Services. For this multi-year opportunity with a diverse set of needs to address, we are currently focusing on establishing partnerships with individuals as well as companies who can help us enhance our overall service portfolio, cut lead times, and ultimately help us deliver successfully. We currently hold sizable Government accounts in the San Francisco bay area including City and County of San Francisco, San Mateo County, and Santa Clara County.
We take great pride in our global reach and local influence. Your experience alongside our highly skilled and talented internal team who guide you along the way, offers key insights into what helps you stand out in a competitive job market.
If you are a partner company, please submit resumes with contact information of your own W2 Consultants only. Submitted consultants are expected to have excellent communication skills.
Security Analyst
Location: Scott Air Force Base, IL (901 South Drive, Building 700, Scott AFB, IL 62225)
Work Schedule: 100% Onsite
Security Clearance: Active Secret Clearance Required
Relocation Assistance: Available
Salary Range: $120,000 - $140,000
Position Overview
We are seeking a Security Analyst to support a critical cybersecurity and monitoring initiative at Scott Air Force Base. This individual will play a key role in the organization's transition from Splunk to the Elastic ecosystem, helping establish and maintain monitoring capabilities, dashboards, and security visibility across enterprise environments.
The ideal candidate will have hands-on experience with security monitoring platforms, log aggregation, and dashboard development, along with a strong understanding of cybersecurity operations and incident detection. This position will work closely with security architects, infrastructure teams, and program stakeholders to ensure successful implementation and ongoing operational support of Elastic-based monitoring solutions.
Key Responsibilities
Support the migration of security monitoring and logging capabilities from Splunk to the Elastic platform.
Configure, monitor, and maintain Elastic deployments, including Elastic Cloud on Kubernetes (ECK) environments.
Develop and maintain dashboards, visualizations, and reporting capabilities to support security operations and leadership visibility.
Analyze security events, logs, and system activity to identify potential threats, vulnerabilities, and anomalous behavior.
Collaborate with Security Architects and engineering teams to implement monitoring strategies and security best practices.
Assist with tuning alerts, correlation rules, and detection mechanisms to improve operational effectiveness.
Support incident response efforts through data analysis and investigative activities.
Document processes, configurations, and operational procedures related to monitoring and security analytics.
Required Qualifications
Active Secret Security Clearance.
3+ years of experience in cybersecurity, security operations, or security monitoring environments.
Experience working with SIEM or log management platforms such as Splunk, Elastic, or similar technologies.
Experience creating dashboards, visualizations, and operational reporting.
Understanding of cybersecurity principles, threat detection, and incident response processes.
Strong analytical and troubleshooting skills.
Ability to work effectively in a collaborative, onsite environment.
Preferred Qualifications
Experience with Elastic Stack (Elasticsearch, Kibana, Beats, Logstash).
Experience supporting Elastic Cloud on Kubernetes (ECK).
Previous involvement in SIEM migration or modernization efforts.
Experience supporting Department of Defense or Federal Government environments.
Familiarity with security architecture concepts and enterprise monitoring frameworks.