Role Description
ECS is seeking an Elastic Security Education & Enablement Consultant to work remotely. This position is contingent upon contract award.
We are seeking an Education & Training Consultant with Elastic Security expertise to lead customer enablement, training delivery, and knowledge transfer efforts while also serving as a Security Analyst supporting Elastic Security operations and use cases. This role requires strong instructional and communication skills, the ability to translate technical concepts for diverse audiences, and hands-on experience with Elastic Security to support customer training, investigations, and best practice adoption.
Key Responsibilities
-
Customer Training & Enablement (Primary):
Develop and deliver instructor-led and virtual training sessions focused on Elastic Security, SIEM operations, threat detection, investigation workflows, and cybersecurity best practices.
-
Curriculum Development:
Create and maintain training materials, presentations, hands-on labs, student guides, exercises, and knowledge transfer documentation tailored to customer requirements.
-
Learning Assessment & Adoption:
Evaluate learner progress, gather feedback, and recommend improvements to training programs to maximize operational readiness and adoption.
-
Elastic Platform Instruction:
Teach customers how to effectively use Elastic Security, Kibana dashboards, detections, case management, visualizations, and reporting capabilities.
-
Workshop Facilitation:
Lead technical workshops, demonstrations, tabletop exercises, and hands-on sessions for security analysts, administrators, and leadership stakeholders.
-
Knowledge Transfer:
Support customer transitions through structured knowledge-sharing sessions and operational handoff activities.
-
SIEM Operations (Elastic Security):
Use Elastic Security to analyze security events, investigate alerts, identify indicators of compromise, and support customer security operations.
-
Threat Detection & Analysis:
Correlate data across network, cloud, and endpoint telemetry to identify suspicious activity and recommend investigative actions.
-
Content Development:
Develop and tune detections, dashboards, visualizations, and security content aligned with customer operational objectives.
-
Incident Response Support:
Assist customers with alert triage, incident investigations, containment recommendations, and root cause analysis activities.
-
Threat Research:
Research emerging threats, vulnerabilities, and adversary techniques to improve customer awareness and detection capabilities.
-
Operational Documentation:
Develop and maintain runbooks, training documentation, standard operating procedures, and best practices.
Qualifications
-
2+ years of experience delivering technical training, cybersecurity education, or customer enablement programs
-
Elastic Security proficiency including monitoring, detection, investigation, dashboards, and reporting capabilities
-
Strong presentation, facilitation, and instructional communication skills
-
Experience developing training materials, course content, lab exercises, or technical documentation
-
Strong cybersecurity fundamentals including network protocols, common attack techniques, and security operations concepts
-
Strong analytical skills for identifying patterns and anomalies across multiple data sources
-
Experience supporting security investigations, alert triage, or threat analysis activities
-
Strong written and verbal communication skills
-
Ability to engage with technical and non-technical audiences
-
Willingness to support domestic or international travel (short, planned engagements)
-
Must possess and maintain a U.S. Passport
-
Must have a Secret clearance, at minimum
Benefits
-
Salary Range: $100,000-$115,000
-
General Description of Benefits