Elastic Content Developer-7-9 Years-Immediate joiners required

We do have an immediate Open opportunity for Elastic Content Developer with immediate joiners.

Experience Level-6-10 Years

Work Location: Bangalore, Chennai, Hyderabad and Gurgaon.

JD Details:

understanding Elastic queries, (ESQL, query dsl) etc. Quite in-depth knowledge of Elasic SIEM rules/Cases etc.
data correlation (ie. correlation data with multiple indices)
Data enrichment using elastic enrich and good awareness of ingest pipelines
transforming data using logstash
understanding of logstash inputs and integration to various components like azure vault, aws s3,.. lots of input plugins out there
python and shell script knowledge

Job Title: Elastic Content Developer

Job Description:
We are seeking a highly skilled Elastic Content Developer to join our team. This role requires an individual with a strong software development background, expertise in Elastic Stack, and experience in designing and implementing scalable data solutions. The ideal candidate will be passionate about working with data, building custom solutions, and leveraging Elastic Stack to drive insights and value for our organization.

Key Responsibilities:

1. Elastic Stack Development:
• Design, develop, and optimize Elastic queries (ESQL, query DSL) for efficient data retrieval and analysis.
• Create and manage Elastic SIEM rules, cases, and alerts to enhance threat detection and response capabilities.
• Perform advanced data correlation using multiple indices to extract actionable insights.
• Utilize Elastic Enrich to perform data enrichment and enhance search and analytical capabilities.
2. Ingest and Transform Data:
• Build and maintain ingest pipelines to preprocess and enrich data before indexing into Elasticsearch.
• Transform and process data using Logstash, leveraging advanced filter plugins and transformations.
• Configure and manage various Logstash input plugins to integrate with external systems like Azure Vault, AWS S3, and other data sources.
3. Scripting and Automation:
• Develop scripts using Python and shell scripting to automate repetitive tasks, data handling, and system integrations.
• Collaborate with DevOps teams to implement automation pipelines for Elastic Stack workflows.
4. Monitoring and Maintenance:
• Monitor and troubleshoot Elasticsearch performance issues and implement optimizations.
• Ensure the health, performance, and security of the Elastic Stack environment.
5. Collaboration and Documentation:
• Work closely with cross-functional teams, including security, data engineering, and development teams, to gather requirements and deliver solutions.
• Document processes, queries, and configurations for better knowledge sharing and maintainability.

Required Skills and Qualifications:

• Proficiency in software development, with strong problem-solving and analytical skills.
• Deep understanding of Elastic Stack components (Elasticsearch, Logstash, Kibana) and their integrations.
• Expertise in writing Elastic queries (ESQL, query DSL) and creating custom dashboards.
• In-depth knowledge of Elastic SIEM, including rule creation, case management, and threat detection workflows.
• Strong experience with data correlation and enrichment using Elastic tools.
• Hands-on experience with Logstash for data transformation and integration with various input plugins.
• Proficiency in Python and shell scripting for automation and custom solutions.
• Familiarity with cloud environments (e.g., AWS, Azure) and associated integrations.

Preferred Qualifications:

• Experience with other data visualization or analysis tools.
• Knowledge of security operations and incident response workflows.
• Understanding of distributed systems and data architecture.