> Markdown version of [/jobs/ext/3047420-siem-engineer-elastic](https://www.wearedevelopers.com/jobs/ext/3047420-siem-engineer-elastic). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SIEM Engineer (Elastic)

- **Company:** Searchability
- **Location:** Watford, UK
- **Experience:** Expert
- **Salary:** £90,000.0
- **Contract:** Permanent contract
- **Skills:** Active Directory, Linux, Elasticsearch, Intrusion Detection and Prevention, JSON, Lightweight Directory Access Protocols (LDAP), Windows Servers, Performance Tuning, Public Key Infrastructure, Windows PowerShell, Logstash, Security Information and Event Management, YAML, Transport Layer Security, Data Ingestion, Software Troubleshooting, Kibana, Restful APIs, Splunk, Vmware
- **Published:** September 24, 2026
- **Apply:** https://www.collegerecruiter.com/job/2898590252-siem-engineer-elastic

## About the Role

* 5+ years administering enterprise on-premises Elastic Stack environments
 * Strong Elasticsearch, Kibana, Logstash, Beats, Elastic Agent and Fleet experience
 * Elastic Security (SIEM) and Elastic Observability
 * Experience supporting large, highly available Elasticsearch clusters
 * Splunk experience
 * Linux and Windows Server
 * PowerShell, REST APIs, JSON and YAML
 * TLS, LDAP, Active Directory and PKI
 * Strong troubleshooting, performance optimisation and automation skills
 * Experience with VMware and enterprise networking

## Description

As an Elastic Stack SME, you will design, implement, optimise and manage enterprise Elastic Stack platforms across a secure on-premises estate. You will take technical ownership of Elasticsearch clusters, Logstash, Kibana, Beats, Elastic Agent and Fleet, while delivering solutions across SIEM, observability, threat detection and high-volume data ingestion.

You will design highly available and resilient platforms, optimise cluster performance, implement security controls and automation, and provide senior-level technical support. You will also produce HLDs, LLDs, SOPs, build guides, DR plans and operational documentation.


## Related Videos

- [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json)
- [CI/CD with Github Actions](https://www.wearedevelopers.com/videos/856-ci-cd-with-github-actions)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)
- [Introducing JSON Structure](https://www.wearedevelopers.com/videos/100219-introducing-json-structure)
- [Add Location-based Searching to Site with ElasticSearch](https://www.wearedevelopers.com/videos/77-add-location-based-searching-to-site-with-elasticsearch)

## Related Articles

- [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)
- [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Fullstack Developer Salary UK](https://www.wearedevelopers.com/magazine/251-fullstack-developer-salary-uk)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)