Elastic SIEM Engineer – On-Prem & Observability Lead

Searchability; Hemel Hempstead; Hybrid; GBP 81,000 - 99,000; Full time

Benefits offered by this job

Salary up to £90,000 DOE

£5,400 car allowance

25 days holiday + bank holidays and in

Matched contributory pension up to 6%

Single private medical cover

4 x life insurance

3% flexible benefit allowance

Job summary

Searchability is seeking an Elastic Stack SME to design, implement, and manage enterprise Elastic Stack platforms on an on-premises estate in Hemel Hempstead. You will own Elasticsearch clusters, Logstash, Kibana, Beats, Elastic Agent and Fleet, delivering SIEM, observability, threat detection and high-volume data ingestion.

The role requires 5+ years administering enterprise Elastic Stack environments, strong experience across Elastic Security and Observability, and a track record of building

Qualifications

• 5+ years administering enterprise on-premises Elastic Stack environments.
• Strong Elasticsearch, Kibana, Logstash, Beats, Elastic Agent and Fleet experience.
• Elastic Security (SIEM) and Elastic Observability.

Responsibilities

• Design, implement, optimise and manage enterprise Elastic Stack platforms on-premises.
• Own Elasticsearch clusters, Logstash, Kibana, Beats, Elastic Agent and Fleet; deliver SIEM/Observability solutions.
• Produce high-level designs, low-level designs, SOPs, build guides, DR plans and operational documentation.
• Provide senior-level technical support and guidance.

Skills

Troubleshooting

Automation

Security

Observability

SIEM

Tools

Elastic Stack

Elasticsearch

Kibana

Logstash

Beats

Elastic Agent

Fleet

Splunk

Linux

Windows Server

PowerShell

REST APIs

JSON

YAML

TLS

LDAP

Active Directory

PKI

VMware

Enterprise networking

Ansible

Job description

Searchability is seeking an Elastic Stack SME to design, implement, and manage enterprise Elastic Stack platforms on an on-premises estate in Hemel Hempstead. You will own Elasticsearch clusters, Logstash, Kibana, Beats, Elastic Agent and Fleet, delivering SIEM, observability, threat detection and high-volume data ingestion.

The role requires 5+ years administering enterprise Elastic Stack environments, strong experience across Elastic Security and Observability, and a track record of building