Elasticsearch Consultant or Architect (Observability OR Security (SIEM) or Search (Data)

GIOS Technology; Bristol; On-site; GBP 60,000 - 80,000; Full time

Job summary

A technology company in the United Kingdom is seeking an experienced Elasticsearch Consultant or Architect. In this pivotal role, the candidate will be responsible for designing, implementing, and optimizing sophisticated Elasticsearch environments tailored to crucial business functions, either in Observability, Security (SIEM), or Search (Data Management). The ideal applicant will have deep expertise in the Elastic Stack, especially in configuring Elastic Agents and Beats, and developing advanced Kibana dashboards. Join our team to make a significant impact!

Qualifications

• Proven ability to design and optimize Elasticsearch environments.
• Experience configuring Elastic Agents and Beats for data collection.
• Ability to deploy Elastic SIEM and conduct threat hunting.

Responsibilities

• Design, implement, and optimize Elasticsearch environments.
• Configure Elastic Agents, Beats, and Logstash for data collection.
• Create detection rules and reports for security posture compliance.

Skills

Elastic Stack expertise

Machine Learning for anomaly detection

Cross-Cluster Replication for disaster recovery

Custom detection rules in Elastic SIEM

Advanced Kibana dashboards

Job description

We are hiring Elasticsearch Consultant or Architect (Observability OR Security (SIEM) or Search (Data)) to join our team.

This pivotal role requires a deep subject matter expert in the Elastic Stack, responsible for designing, implementing, and optimizing complex Elasticsearch environments tailored to critical business functions in either Observability, Security (SIEM), or Search (Data Management).

Elastic Observability

Expert in configuring Elastic Agents, Beats (Filebeat, Metricbeat, etc.), and Logstash for comprehensive data collection. Designing APM services, setting up synthetic monitoring, and creating advanced Kibana dashboards for holistic operational visibility.

Elastic Security (SIEM)

Proven ability to deploy and manage Elastic SIEM, including endpoint security integration. Expertise in using security data (logs, events) to create custom detection rules, conduct threat hunting, and report on security posture and compliance.

Elasticsearch for large-scale data management

Deep experience with at least two of the following: Machine Learning (ML) for anomaly detection; Cross-Cluster Replication (CCR) for disaster recovery / HA; Searchable Snapshots / Cold / Frozen Tiers for cost optimization; or advanced use of Data Streams and ILM.