Elastic Security Engineer (Contract) - SIEM Pipelines Expert

G-Research; City of Westminster; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Competitive compensation

Lunch provided and barista bar

Informal dress code & work‑lifeBalance

Monthly company events

Job summary

G-Research in London seeks an Elastic Security Engineer to design scalable security data pipelines, implement ingestion into Elastic SIEM, and elevate data quality across cloud and on-prem environments.

You will collaborate with SOC, CSIRT, and Platform teams, apply Python or Bash scripting, and shape a long-term data strategy that supports detection, threat hunting and compliance within a fast-moving quantitative finance firm.

Qualifications

• Strong experience with Elastic Stack and data engineering technologies such as Logstash, Beats, Kafka or similar.
• Expertise in Elastic data modelling, indexing and performance optimisation.
• Experience designing scalable log collection and processing architectures.
• Knowledge of data governance, retention and security telemetry across cloud, endpoint and network.
• Experience with Azure, AWS, GCP or hybrid environments.

Responsibilities

• Acting as the technical authority and SME for security data within the Elastic Security ecosystem.
• Designing, implementing and maintaining scalable security data ingestion pipelines into Elastic SIEM.
• Owning the onboarding, tuning, normalisation and stabilisation of security data feeds across cloud, endpoint, network and SaaS sources.
• Defining and continuously improving data quality standards to support detection, investigation and threat hunting.
• Contributing to the operation, performance and evolution of the Elastic Security platform.
• Applying software engineering and scripting skills, including in Python or Bash, to automate ingestion, validation, monitoring and operational workflows.
• Supporting configuration as code and infrastructure as code to improve consistency and scalability across security tooling.
• Driving the development of a security data strategy aligned with business and regulatory requirements.

Skills

Elastic Stack

Data engineering

Security data pipelines

Logstash

Beats

Kafka

Azure/AWS/GCP

Security analytics

Python/Bash

Tools

Elastic SIEM

Logstash

Beats

Kafka

Job description

G-Research in London seeks an Elastic Security Engineer to design scalable security data pipelines, implement ingestion into Elastic SIEM, and elevate data quality across cloud and on-prem environments.

You will collaborate with SOC, CSIRT, and Platform teams, apply Python or Bash scripting, and shape a long-term data strategy that supports detection, threat hunting and compliance within a fast-moving quantitative finance firm.