Information Security Architect

Explore Group; United Kingdom; Remote; GBP 110,000 - 150,000; Full time

Job summary

Explore Group is seeking an Elastic SIEM SME / Security Architect to lead the design and delivery of enterprise security monitoring architectures for secure defence and public sector clients in the UK. The role blends architecture ownership with hands-on deployment, including on-site configuration, integration, and delivery for secure environments.

You will drive client discovery, translate security monitoring requirements into robust Elastic SIEM architectures, and act as the technical

Qualifications

• Active UK MOD DV clearance is mandatory.
• Proven track record architecting and deploying Elastic SIEM / Elastic Security in production.

Responsibilities

• Lead client discovery engagements and architect bespoke Elastic Security / SIEM solutions for mission‑critical monitoring.
• Own end‑to‑end technical delivery, configuring, deploying, and integrating Elastic SIEM across secure infrastructure.
• Act as the lead technical authority on engagements, explaining design decisions and troubleshooting complex issues.
• Engage with technical teams and client stakeholders to guide implementations to operational delivery.
• Produce high‑quality technical documentation, architectural designs, and handover materials.

Skills

Elastic SIEM

Security Architecture

Elastic Stack

Technical SME

Tools

Elasticsearch

Logstash

Kibana

Beats/Agent

Job description

Role: Elastic SIEM SME / Security Architect

Location: UK Remote with some client travel

Clearance: Active UK MOD Developed Vetting (DV) Mandatory

A specialist technology consultancy is looking for a hands‑on Elastic SIEM SME / Security Architect to lead the technical solutioning and delivery of enterprise security monitoring architectures within highly secure defence and public sector environments.

This role combines end-to-end architecture ownership with direct, hands‑on deployment. You will lead client discovery, translate high‑level security monitoring requirements into robust Elastic SIEM architectures, and personally deliver the build, integration, and configuration on site.

Key Responsibilities

• Lead client discovery engagements and architect bespoke Elastic Security / SIEM solutions aligned with mission‑critical monitoring requirements.
• Own end‑to‑end technical delivery, configuring, deploying, and integrating Elastic SIEM capabilities across complex, secure infrastructure.
• Act as the lead technical authority on client engagements, explaining design decisions, evaluating trade‑offs, and troubleshooting complex issues.
• Engage closely with both technical teams and senior client stakeholders to guide implementations through to operational delivery.
• Produce high‑quality technical documentation, architectural designs, and handover materials.

Candidate Requirements

• Active UK MOD Developed Vetting (DV) clearance is strictly mandatory (SC clearance alone cannot be considered).
• Proven track record architecting and deploying hands‑on Elastic SIEM / Elastic Security solutions in production environments.
• Practical expertise across the wider Elastic Stack (Elasticsearch, Logstash, Kibana, Beats/Agent).
• Experience operating as a technical SME capable of leading discovery workshops while actively executing configuration and integration work.