Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 1 hour ago

BI and Analytics Lead

ECS FEDERAL LLC272 open roles

Pay
$158,000 – $237,000 a year
Where
ARLINGTON, VA, USA
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowBI and Analytics LeadECS FEDERAL LLC · ARLINGTON, VA, USA

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on ECS FEDERAL LLC's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.8% of postings close within 7 days. Measured by our own scanner across the market. ECS FEDERAL LLC postings stay open a median of 7 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.8%7 days
  4. 22.3%14 days
  5. 37.8%30 days
  6. 59.0%60 days
This job: first seen 1 hour ago

ECS FEDERAL LLC median: 7 days open

The posting

Everforth ECS is seeking a Lead BI & Visualization Engineer with a strong foundation in cybersecurity and vulnerability data to guide the technical direction and delivery of our enterprise analytics and dashboard products. In this role, you will lead a dedicated cross-functional team—collaborating closely with BI developers, QA testers, DevOps, and Site Reliability Engineers (SREs)—responsible for the end-to-end lifecycle of our operational intelligence platform.

Rather than building custom web applications from scratch, your core technical domain centers on the Elasticsearch and Kibana ecosystem. You will own the “last mile” of our analytical pipeline: architecting Elasticsearch ingest pipelines, designing real-time continuous data transforms, standardizing index mappings, and authoring high-performance Kibana visualizations and Canvas reports.

Crucially, you understand what lives inside the data: you know vulnerability management, threat metrics, CVEs, and CVSS severity scoring. Because you will be working with data that has already been normalized, deduplicated, and correlated from multiple security tools into a standardized data set, you will focus on building intuitive, high-level visualizations that help cybersecurity teams immediately pinpoint and remediate critical enterprise risks.

Because we treat our dashboard suite as an enterprise software product, you will apply rigorous software delivery practices to low-code and configuration-driven BI deliverables: managing JSON visualization definitions in Git/GitHub, driving automated validation and deployment pipelines, and ensuring zero-downtime releases across Dev, Test, and Production environments.

Team Mission & Organizational Scope

To ensure clear ownership across our engineering organization:

  • Data Management Team: Owns upstream data governance, target definitions, and source system access.
  • Pipeline Dev Team: Owns upstream transport, raw extraction, and Python-based streaming/ingestion into storage topics or raw indices. This team is responsible for normalizing, deduplicating, and correlating data sets from individual tools (such as Tenable, Qualys, CrowdStrike, and Rapid7) through various CAASM platforms to deliver a clean, standardized security data model.
  • Your Team (BI & Analytics Engineering): Owns everything inside the Elasticsearch analytical layer down to the user screen—ingesting the standardized cyber data sets, managing Elasticsearch Ingest Pipelines, Painless script processors, Continuous Transforms, Kibana Lens/Canvas dashboards, saved object configuration management, and release automation.

Key Responsibilities

1. Cyber Analytics & Threat Domain Visualization

  • Standardized Security Data Focus: Leverage pre-normalized, deduplicated, and correlated vulnerability and security telemetry data sets to construct unified executive and operational views.
  • Risk Prioritization Dashboards: Design intuitive workflows that enable analysts to zero in on critical-severity vulnerabilities, exploitation status (e.g., CISA KEV catalog alignment), SLA breach risks, and patch remediation velocity across the entire enterprise.
  • Stakeholder Translation: Act as the primary liaison between cyber operations/leadership and technical implementation, turning operational questions into structured metrics and clear visual narratives.

2. Elasticsearch & Analytical Ingest Architecture

  • Ingest Pipelines & Transforms: Design, build, and maintain Elasticsearch Ingest Pipelines (using grok, dissect, date, user-agent, and Painless script processors) to enrich and prepare incoming data models before indexing.
  • Continuous Aggregations & Performance: Create Elasticsearch Continuous Transforms to pre-compute rolling metrics (e.g., 30-day active vulnerability states, MTTR by business unit, unique impacted host counts), eliminating search-time overhead and cluster circuit-breaker issues.
  • Schema Governance & Optimization: Enforce strict mapping standards (aligned with Elastic Common Schema / ECS) to ensure query speed, index efficiency, and long-term storage sustainability alongside Index Lifecycle Management (ILM) policies.

3. BI-as-Code & Modern Software Delivery (CI/CD)

  • Configuration as Code: Treat Kibana dashboards, index patterns, searches, and Canvas workpads as version-controlled software assets, managing JSON saved objects in Git/GitHub repositories.
  • Release Automation: Partner with DevOps and SRE to automate artifact packaging, validation testing, and multi-environment promotion (Dev → Test → Prod) with zero downtime.
  • Performance & Reliability Monitoring: Collaborate with SREs to monitor query execution times, slow logs, and cluster resource utilization, ensuring enterprise dashboards load within sub-second thresholds.

4. Technical Leadership & Team Mentorship

  • Team Leadership: Lead daily agile delivery for a team of 3–5 BI developers and analysts, establishing code review practices for pipeline processors and dashboard JSON definitions.
  • Enablement & Standards: Define enterprise UX/UI style guides, color accessibility standards, naming conventions, and visualization guidelines.
  • Capability Building: Mentor team members in advanced Elasticsearch DSL, Painless scripting, Kibana Vega/Lens visualization techniques, and cyber domain fundamentals.

Salary Range: $158,000 - $237,000 General Description of Benefits

  • 10+ years of experience in an IT related field
  • 5+ years of hands-on experience in BI engineering, analytics engineering, or data visualization, with at least 2+ years acting as a Tech Lead, Team Lead, or Senior Engineer mentoring others.
  • Direct experience analyzing security data (vulnerabilities, CVE/CVSS frameworks, asset inventories, patch compliance, or SOC telemetry). Must demonstrate an understanding of how to work with unified, correlated data sets and how security leaders prioritize critical vs. low-impact risks.
  • Expert-level mastery of Kibana (Lens, TSVB, Discover, Canvas, Saved Objects, Dashboard drill-downs, and Vega/custom visualization).
  • Strong proficiency in Elasticsearch Ingest Node pipelines, Painless scripting, continuous Transforms, index templates, and Query DSL aggregations.
  • Fluency in Git/GitHub workflows (branching models, pull requests, automated linting/validation, and peer reviews) applied to configuration files and JSON schemas.
  • Practical understanding of CI/CD concepts and multi-tiered release promotion (Dev/Test/Prod).
  • Advanced proficiency in SQL and Elasticsearch KQL/DSL.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against ECS FEDERAL LLC's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on ECS FEDERAL LLC's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    ECS FEDERAL LLC's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.