Security Data and Platform Engineer

As a Security Data and Platform Engineer, you will combine broad security engineering expertise with deep knowledge of security data pipelines and Elastic Security.

As the organisation’s Security Data SME, you will own the onboarding, tuning, stabilisation and evolution of security telemetry across cloud, hybrid and corporate environments.

Alongside this specialist focus, you will contribute as a well-rounded Security Engineer, applying software engineering, automation and platform thinking to solve a broad range of security challenges.

Working closely with SOC, CSIRT, Detection Engineering, Platform Engineering and Cloud teams, you will ensure security data is reliable, high-quality, cost-effective and fit for monitoring, investigation, threat hunting and compliance., * Acting as the technical authority and SME for security data within the Elastic Security ecosystem

• Designing, implementing and maintaining scalable security data ingestion pipelines into Elastic SIEM
• Owning the onboarding, tuning, normalisation and stabilisation of security data feeds across cloud, endpoint, network and SaaS sources
• Defining and continuously improving data quality standards to support detection, investigation and threat hunting
• Contributing to the operation, performance and evolution of the Elastic Security platform
• Applying software engineering and scripting skills, for example in Python or Bash, to automate ingestion, validation, monitoring and operational workflows
• Supporting configuration as code and infrastructure as code to improve consistency and scalability across security tooling
• Driving the development of a security data strategy aligned with business and regulatory requirements

The ideal candidate will have the following skills and experience:

• Strong experience with Elastic Stack and data engineering technologies such as Logstash, Beats, Kafka or similar
• Expertise in Elastic data modelling, indexing and performance optimisation
• Experience designing scalable log collection and processing architectures
• Knowledge of data governance, retention and security telemetry across cloud, endpoint and network
• Experience with Azure, AWS, GCP or hybrid environments

Behavioural:

• Strategic mindset with a focus on long-term data quality and platform evolution
• Strong communication skills, with ability to explain complex concepts to technical and non-technical stakeholders
• Collaborative approach with experience mentoring others and working across teams to improve security outcomes

Pulled from the full job description

• Annual leave
• Company pension
• Company events, * Highly competitive compensation plus annual discretionary bonus
• Lunch provided via Just Eat for Business and dedicated barista bar
• 35 days’ annual leave
• 9% company pension contributions
• Informal dress code and excellent work-life balance
• Comprehensive healthcare and life assurance
• Cycle-to-work scheme
• Monthly company events