SIEM Engineer (Elastic)

As an Elastic Stack SME, you will design, implement, optimise and manage enterprise Elastic Stack platforms across a secure on-premises estate. You will take technical ownership of Elasticsearch clusters, Logstash, Kibana, Beats, Elastic Agent and Fleet, while delivering solutions across SIEM, observability, threat detection and high-volume data ingestion.

You will design highly available and resilient platforms, optimise cluster performance, implement security controls and automation, and provide senior-level technical support. You will also produce HLDs, LLDs, SOPs, build guides, DR plans and operational documentation.

• 5+ years administering enterprise on-premises Elastic Stack environments
• Strong Elasticsearch, Kibana, Logstash, Beats, Elastic Agent and Fleet experience
• Elastic Security (SIEM) and Elastic Observability
• Experience supporting large, highly available Elasticsearch clusters
• Splunk experience
• Linux and Windows Server
• PowerShell, REST APIs, JSON and YAML
• TLS, LDAP, Active Directory and PKI
• Strong troubleshooting, performance optimisation and automation skills
• Experience with VMware and enterprise networking, Elastic Stack, Elasticsearch, Kibana, Logstash, Elastic Security, Elastic Observability, SIEM, Elastic Agent, Fleet, Beats, Splunk, Linux, PowerShell, Ansible, NSD

• Salary up to £90,000 DOE
• £5,400 car allowance
• 25 days holiday + bank holidays and your birthday off
• Matched contributory pension up to 6%
• Single private medical cover
• 4 x life insurance
• 3% flexible benefit allowance