Security Data Platform Engineer — Elastic SIEM & Cloud

Barlowe LLP; Greater London; On-site; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Discretionary bonus

Lunch via Just Eat for Business

35 days leave

Company pension 9%

Health care

Cycle-to-work

Monthly events

Informal dress code

Job summary

G-Research in London seeks a Security Data and Platform Engineer to own the onboarding, tuning and evolution of security telemetry across cloud, hybrid and corporate environments. You will design scalable data ingestion into Elastic SIEM and apply software engineering to automate workflows.

You will collaborate with SOC, CSIRT, Detection Engineering, Platform Engineering and Cloud teams to ensure high‑quality, cost‑effective security data for monitoring, investigation, threat hunting and

Qualifications

• Strong experience with Elastic Stack and data engineering technologies
• Expertise in Elastic data modelling, indexing and performance optimisation
• Experience designing scalable log collection and processing architectures
• Knowledge of data governance, retention and security telemetry across cloud, endpoint and network
• Experience with Azure, AWS, GCP or hybrid environments
• Strategic mindset with a focus on long‑term data quality and platform evolution
• Strong communication skills, with ability to explain complex concepts to technical and non‑technical stakeholders
• Collaborative approach with experience mentoring others and working across teams to improve security outcomes

Responsibilities

• Act as the technical authority and SME for security data within the Elastic Security ecosystem
• Design, implement and maintain scalable security data ingestion pipelines into Elastic SIEM
• Own the onboarding, tuning, normalisation and stabilisation of security data feeds across cloud, endpoint, network and SaaS sources
• Define and continuously improve data quality standards to support detection, investigation and threat hunting
• Contribute to the operation, performance and evolution of the Elastic Security platform
• Apply software engineering and scripting skills, for example in Python or Bash, to automate ingestion, validation, monitoring and operational workflows
• Support configuration as code and infrastructure as code to improve consistency and scalability across security tooling
• Drive the development of a security data strategy aligned with business and regulatory requirements

Skills

Elastic Stack

Data engineering

Security data pipelines

Logstash

Beats

Kafka

Data governance

Cloud environments (Azure AWS GCP)

Data quality

Communication

Mentoring/ cross-team collaboration

Tools

Elastic Stack

Logstash

Beats

Kafka

Job description

G-Research in London seeks a Security Data and Platform Engineer to own the onboarding, tuning and evolution of security telemetry across cloud, hybrid and corporate environments. You will design scalable data ingestion into Elastic SIEM and apply software engineering to automate workflows.

You will collaborate with SOC, CSIRT, Detection Engineering, Platform Engineering and Cloud teams to ensure high‑quality, cost‑effective security data for monitoring, investigation, threat hunting and