2 hours ago
London, United KingdomSenior
Responsibilities
- Act as the technical authority and subject matter expert for security data within the Elastic Security ecosystem.
- Design, implement, and maintain scalable security data ingestion pipelines into Elastic SIEM.
- Own the onboarding, tuning, normalisation, and stabilisation of security data feeds from cloud, endpoint, network, and SaaS sources.
- Define and improve data quality standards for detection, investigation, and threat hunting.
- Contribute to the operation, performance, and evolution of the Elastic Security platform.
- Use Python or Bash to automate ingestion, validation, monitoring, and operational workflows.
- Support configuration as code and infrastructure as code across security tooling.
- Drive a security data strategy aligned with business and regulatory requirements.
- Collaborate with SOC, CSIRT, Detection Engineering, Platform Engineering, and Cloud teams, including mentoring others.
Requirements
- Strong experience with Elastic Stack and data engineering technologies such as Logstash, Beats, Kafka, or similar.
- Expertise in Elastic data modelling, indexing, and performance optimisation.
- Experience designing scalable log collection and processing architectures.
- Knowledge of data governance, retention, and security telemetry across cloud, endpoint, and network environments.
- Experience with Azure, AWS, GCP, or hybrid environments.
- Strong communication skills and the ability to explain complex concepts to technical and non-technical stakeholders.
- Strategic mindset focused on long-term data quality and platform evolution.
- Collaborative experience working across teams to improve security outcomes.
Benefits
- Highly competitive compensation plus an annual discretionary bonus.
- Lunch provided via Just Eat for Business and a dedicated barista bar.
- 35 days of annual leave.
- 9% company pension contributions.
- Informal dress code and excellent work-life balance.
- Comprehensive healthcare and life assurance.
- Cycle-to-work scheme.
- Monthly company events.
- Inclusive work environment with accommodations available for applicants with disabilities or special needs.
Tech Stack
Categories
Data EngineeringSecurity
