Elastic Stack SIEM Architect – On-Prem Security Expert

Searchability NS&D; Hemel Hempstead; Hybrid; GBP 81,000 - 99,000; Full time

Benefits offered by this job

25 days holiday + bank holidays and my

birthday off

Matched contributory pension up to 6%

Single private medical cover

4 x life insurance

Job summary

Searchability NS&D is seeking an Elastic Stack SME to design, implement, optimise and manage enterprise Elastic Stack platforms across a secure on-premises estate. You will own Elasticsearch clusters, Logstash, Kibana, Beats, Elastic Agent and Fleet, delivering solutions for SIEM, observability, threat detection and high-volume data ingestion.

You will design highly available platforms, optimise performance, implement security controls and automation, and provide design docs, build guides and DR

Qualifications

• 5+ years administering enterprise on-premises Elastic Stack environments.
• Strong Elasticsearch, Kibana, Logstash, Beats, Elastic Agent and Fleet experience.
• Elastic Security (SIEM) and Elastic Observability.
• Experience supporting large, highly available Elasticsearch clusters.
• Linux and Windows Server.
• PowerShell, REST APIs, JSON and YAML.
• TLS, LDAP, Active Directory and PKI.
• Strong troubleshooting, performance optimisation and automation skills.
• Experience with VMware and enterprise networking.

Responsibilities

• Design, implement, optimise and manage enterprise Elastic Stack platforms across a secure on-premises estate.
• Take technical ownership of Elasticsearch clusters, Logstash, Kibana, Beats, Elastic Agent and Fleet for SIEM, observability, threat detection and high-volume data ingestion.
• Design highly available and resilient platforms, optimise cluster performance, implement security controls and automation.
• Produce HLDs, LLDs, SOPs, build guides, DR plans and operational documentation.

Skills

Elastic Stack

Elasticsearch

Kibana

Logstash

Beats

Fleet

Elastic Security (SIEM)

Elastic Observability

Linux

Windows Server

PowerShell

REST APIs

JSON

YAML

TLS

LDAP

Active Directory

PKI

VMware

Enterprise Networking

Tools

PowerShell

REST APIs

JSON

YAML

VMware

Active Directory

Job description

Searchability NS&D is seeking an Elastic Stack SME to design, implement, optimise and manage enterprise Elastic Stack platforms across a secure on-premises estate. You will own Elasticsearch clusters, Logstash, Kibana, Beats, Elastic Agent and Fleet, delivering solutions for SIEM, observability, threat detection and high-volume data ingestion.

You will design highly available platforms, optimise performance, implement security controls and automation, and provide design docs, build guides and DR