ZipRecruiter

Log In

1

Logstash Jobs (NOW HIRING)

Tech Tammina

ELK Engineer

Alpharetta, GA · On-site

ELK Engineer (Onsite - Alpharetta, GA) ELK Engineer, Alpharetta, GA Locals, "7+ years of experience with ELK Stack: (Elasticsearch, Logstash, Kibana and beats), Ruby and/or Python, GIT and Unix Shell ...

Tech Tammina LLC

ELK Engineer

Alpharetta, GA · On-site

ELK Engineer (Onsite - Alpharetta, GA) ELK Engineer, Alpharetta, GA Locals, "7+ years of experience with ELK Stack: (Elasticsearch, Logstash, Kibana and beats), Ruby and/or Python, GIT and Unix Shell ...

Volto USA

ELK Engineer at Las Vegas, NV

Las Vegas, NV · On-site

Key responsibilities include configuring Logstash for data processing, optimizing Elasticsearch for data storage and retrieval, developing Kibana dashboards for insights, and ensuring the system ...

TriOptus LLC

Elastic Search Engineer

Dahlonega, GA · On-site

$110K - $152K/yr

If you have 7+ years of experience with ELK Stack (ElasticSearch, Logstash, Kibana, and Beats), along with strong expertise in automation, version control, and scaling data architectures, this is the ...

next page

Showing results 1-20

All JobsLogstash Jobs

Logstash information

See salary details

$12

$20

$33

How much do logstash jobs pay per hour?

As of Jul 9, 2026, the average hourly pay for logstash in the United States is $20.44, according to ZipRecruiter salary data. Most workers in this role earn between $16.83 and $21.39 per hour, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Logstash Engineer, and why are they important?

To thrive as a Logstash Engineer, you need strong experience in data pipeline design, ETL processes, and a good understanding of the ELK Stack, often supported by a background in computer science or IT. Familiarity with Logstash configuration, regex, Elasticsearch, Kibana, and tools like Beats, as well as certifications such as Elastic Certified Engineer, are typically required. Analytical thinking, problem-solving, and effective communication help engineers troubleshoot issues and collaborate with cross-functional teams. These skills ensure reliable data ingestion, transformation, and visualization, which are vital for organizational insights and system monitoring.

What is Logstash and what is it used for?

Logstash is an open-source data processing pipeline that ingests, transforms, and forwards data from a variety of sources to a designated destination, such as Elasticsearch. It is often used as part of the Elastic Stack (ELK Stack) to collect logs, parse them, and transport them for analysis and visualization. Logstash supports a wide range of input, filter, and output plugins, making it highly versatile for handling logs, metrics, and other event data. Its ability to process and enrich data in real time makes it popular among organizations for centralized logging and monitoring.

What are some common challenges Logstash engineers face when managing large-scale data pipelines?

Logstash engineers working with large-scale data pipelines often encounter challenges such as managing throughput bottlenecks, optimizing pipeline performance, and handling diverse data formats. Ensuring data reliability and minimizing latency can require careful tuning of pipeline configurations and efficient resource allocation. Collaboration with DevOps, data engineering, and security teams is common to ensure seamless data flow and to troubleshoot issues quickly, making strong communication skills and adaptability important for success in this role.

What is the difference between Logstash vs Elasticsearch?

AspectLogstashElasticsearch
Primary FunctionData collection, processing, and transformationData storage, search, and analytics
Work EnvironmentPart of the Elastic Stack, used for log and event data processingDistributed search and analytics engine
Required SkillsData pipeline, scripting, and log managementSearch queries, data indexing, and cluster management

Logstash and Elasticsearch are both key components of the Elastic Stack but serve different purposes. Logstash handles data collection and processing, while Elasticsearch stores and enables fast search and analysis of that data. They are often used together to build comprehensive logging and analytics solutions.

More about Logstash jobs
What job categories do people searching Logstash jobs look for? The top searched job categories for Logstash jobs are:
Logstash jobs near you
Infographic showing various Logstash job openings in the United States as of July 2026, with employment types broken down into 91% Full Time, 4% Part Time, and 5% Contract. Highlights an 86% Physical, 4% Hybrid, and 10% Remote job distribution, with an average salary of $42,520 per year, or $20.4 per hour.

Senior Consultant, SIEM Engineer (Logstash)

Infinitive Inc

Ashburn, VA • On-site

$117K - $160K/yr

Full-time

Posted 7 days ago

Job description

About Infinitive
Infinitive is a data and AI consultancy that enables its clients to modernize, monetize and operationalize their data to create lasting and substantial value. We possess deep industry and technology expertise to drive and sustain adoption of new capabilities. We match our people and personalities to our clients' culture while bringing the right mix of talent and skills to enable high return on investment.

Infinitive has been named “Best Small Firms to Work For” by Consulting Magazine 8 times, most recently in 2025. Infinitive has also been named a Washington Post “Top Workplace”, Washington Business Journal “Best Places to Work”, and Virginia Business “Best Places to Work.”


About the Role
We are seeking a highly skilled SIEM Engineer to support our client's Cybersecurity Operations team. In this role, you will be responsible for building, optimizing, and maintaining the data pipelines that power our security monitoring infrastructure. You will focus heavily on data ingestion, log parsing, and transformation to ensure high-fidelity data reaches our analytics platforms.

The ideal candidate bridges the gap between Security Operations and DevOps, leveraging modern CI/CD practices to manage infrastructure-as-code and building resilient data architectures.

Key Responsibilities

  • Log Ingestion & Parsing: Design, develop, and maintain complex Logstash pipelines. Write efficient Regular Expressions (Regex) and utilize Logstash syntax to parse, filter, and enrich unstructured log data.

  • Data Architecture & Engineering: Implement and optimize source-to-target data architectures, ensuring scalable and reliable data transformation from diverse security sources.

  • Event-Driven Systems: Manage and troubleshoot data flowing through cloud-native event-driven messaging systems, specifically AWS SQS and SNS.

  • CI/CD & Version Control: Treat SIEM configurations as code. Manage configurations using GitHub and automate testing and deployment via Jenkins or similar CI/CD pipelines.

  • SIEM Analysis & Troubleshooting: Analyze and query log data within Splunk to audit data quality, troubleshoot parsing errors, and investigate system messages.

  • Database Querying: Write and understand SQL syntax to interact with relational databases for data validation, lookups, and reporting.

Required Skills & QualificationsTechnical Skills:

  • Logstash Expertise (Required): Deep understanding of Logstash syntax, plugin configurations (input, filter, output), and advanced string manipulation using Regular Expressions (Regex).

  • DevOps & Automation: Hands-on experience with version control (GitHub) and building/maintaining deployment pipelines (Jenkins or equivalent CI/CD tools).

  • Big Data & Architecture: Strong grasp of big data concepts, data transformation patterns, and source-to-target pipeline architectures.

  • Cloud Messaging: Experience with event-based, distributed messaging systems, specifically Amazon SQS and Amazon SNS.

  • SIEM & Analytics: Proficiency in Splunk, specifically for reading logs, diagnosing infrastructure error messages, and validating data ingestion.

  • Database Skills: Solid understanding of SQL syntax for querying and validating data.

Soft Skills & Experience:

  • 3+ years of experience in Security Engineering, Data Engineering, or a DevSecOps role.

  • Strong analytical and troubleshooting skills with a keen eye for data anomalies.

  • Ability to work collaboratively in an agile environment.

Nice to Have:

  • Experience with the broader Elastic Stack (Elasticsearch, Kibana).

  • AWS Certified Security or AWS Certified SysOps Administrator.

  • Familiarity with containerization (Docker, Kubernetes) for scaling log collectors.
    Infinitive is required by law in some jurisdictions to include a reasonable estimate of the compensation range for this role. The determination of this range includes various factors not limited to skill set, level, experience, relevant training, and licensure and certifications. Compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range for this role in the U.S. is $90,000.00 - $140,000.00.
    Infinitive is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.
     

Powered by JazzHR

Ap3BWllYUF