SIEM Engineer (Elastic)

Searchability

Watford, UK

8 days ago

Apply on www.collegerecruiter.com

Prepare application

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Expert

Experience required

5 years minimum

Compensation

£90,000.0

Working hours

Regular working hours

Job source

www.collegerecruiter.com

Tech stack

Active Directory Linux Elasticsearch Intrusion Detection and Prevention JSON Lightweight Directory Access Protocols (LDAP) Windows Servers Performance Tuning Public Key Infrastructure Windows PowerShell Logstash Security Information and Event Management

+8 more

YAML Transport Layer Security Data Ingestion Software Troubleshooting Kibana Restful APIs Splunk Vmware

Job description

As an Elastic Stack SME, you will design, implement, optimise and manage enterprise Elastic Stack platforms across a secure on-premises estate. You will take technical ownership of Elasticsearch clusters, Logstash, Kibana, Beats, Elastic Agent and Fleet, while delivering solutions across SIEM, observability, threat detection and high-volume data ingestion.

You will design highly available and resilient platforms, optimise cluster performance, implement security controls and automation, and provide senior-level technical support. You will also produce HLDs, LLDs, SOPs, build guides, DR plans and operational documentation.

Requirements

5+ years administering enterprise on-premises Elastic Stack environments
Strong Elasticsearch, Kibana, Logstash, Beats, Elastic Agent and Fleet experience
Elastic Security (SIEM) and Elastic Observability
Experience supporting large, highly available Elasticsearch clusters
Splunk experience
Linux and Windows Server
PowerShell, REST APIs, JSON and YAML
TLS, LDAP, Active Directory and PKI
Strong troubleshooting, performance optimisation and automation skills
Experience with VMware and enterprise networking