Elasticsearch Consultant or Architect (Observability OR Security (SIEM) or Search (Data)

GIOS Technology; United Kingdom; On-site; GBP 55,000 - 75,000; Full time

Job summary

A leading technology firm in the United Kingdom is hiring for the position of Elasticsearch Consultant or Architect. This full-time role involves designing and implementing complex Elasticsearch environments, focusing on areas like Observability, Security (SIEM), and Data Management. Ideal candidates are expected to have deep expertise in the Elastic Stack, including proficiency in configuring various Elastic tools and conducting threat detection. Join a growing team and contribute to impactful data solutions.

Qualifications

• Deep expertise in designing, implementing, and optimizing complex Elasticsearch environments.
• Experience with Elastic Agents, Beats, and Logstash for data collection.
• Ability to deploy and manage Elastic SIEM and create custom detection rules.

Responsibilities

• Designing APM services and setting up synthetic monitoring.
• Creating advanced Kibana dashboards for operational visibility.
• Conducting threat hunting and reporting on security posture.

Skills

Elastic Stack expertise

SIEM management

Data Management

Kibana dashboards creation

Threat hunting

Job description

Elasticsearch Consultant or Architect (Observability OR Security (SIEM) or Search (Data))

We are hiring Elasticsearch Consultant or Architect (Observability OR Security (SIEM) or Search (Data)) to join our team.

This pivotal role requires a deep subject matter expert in the Elastic Stack, responsible for designing, implementing, and optimizing complex Elasticsearch environments tailored to critical business functions in either Observability, Security (SIEM), or Search (Data Management).

Elastic Observability

Expert in configuring Elastic Agents, Beats (Filebeat, Metricbeat, etc.), and Logstash for comprehensive data collection. Designing APM services, setting up synthetic monitoring, and creating advanced Kibana dashboards for holistic operational visibility.

Elastic Security (SIEM)

Proven ability to deploy and manage Elastic SIEM, including endpoint security integration. Expertise in using security data (logs, events) to create custom detection rules, conduct threat hunting, and report on security posture and compliance.

Elasticsearch for large-scale data management

Deep experience with at least two of the following: Machine Learning (ML) for anomaly detection; Cross-Cluster Replication (CCR) for disaster recovery/HA; Searchable Snapshots/Cold/Frozen Tiers for cost optimization; or advanced use of Data Streams and ILM.

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Information Technology, Product Management, and Other; IT Services and IT Consulting, Data Infrastructure and Analytics, Computer and Network Security