Cyber Data Engineer: Build & Optimize CyberELK (Elasticsearch)

Bounteous; Glasgow; On-site; GBP 60,000 - 90,000; Full time

Job summary

Bounteous is recruiting a Cyber Data Engineer to build and maintain CyberELK, an Elasticsearch-based data platform, in Glasgow. The role focuses on onboarding data sources, building automation, and optimizing cluster performance within a security analytics context.

Successful candidates will work with cyber teams including security response, investigations and insider threat, applying strong troubleshooting and DevOps skills in a collaborative setting.

Qualifications

• Experience deploying and managing Elasticsearch platforms in production.
• Experience with Elastic Stack ingest/pipeline tooling (Logstash/Beats).
• Experience with data pipelines on major Cloud Service Providers (GCP/AWS/Azure).
• Automation using Python and Ansible.
• Strong OS/Networking understanding (Linux/Unix, HTTP, encryption).
• Version control and DevOps tooling (Git/Jenkins/Jira).
• Strong analytical and troubleshooting skills.
• Familiarity with Agile/Kanban.

Responsibilities

• Onboard data sources into CyberELK with ECS mapping.
• Develop automation tools that integrate with in-house CMF and APIs.
• Tune Elasticsearch cluster performance, ILM and ingest pipelines.
• Provide consultancy to internal stakeholders.
• Escalate to resolve complex issues with other infra teams.

Tools

Git/Jenkins/Jira

Job description

Bounteous is recruiting a Cyber Data Engineer to build and maintain CyberELK, an Elasticsearch-based data platform, in Glasgow. The role focuses on onboarding data sources, building automation, and optimizing cluster performance within a security analytics context.

Successful candidates will work with cyber teams including security response, investigations and insider threat, applying strong troubleshooting and DevOps skills in a collaborative setting.