Security Data Platform Engineer — Elastic SIEM & Pipelines

G-Research; Greater London; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

35 days annual leave

Annual discretionary bonus

Healthcare and life assurance

Barista bar

Job summary

G-Research in London is seeking a Security Data and Platform Engineer to combine security engineering with deep knowledge of security data pipelines and Elastic Security, ensuring telemetry across cloud, hybrid and corporate environments remains reliable and cost‑effective.

You will own onboarding, tuning and stabilisation of security data feeds, contribute as a general Security Engineer, and work with SOC, CSIRT, Detection Engineering, Platform Engineering and Cloud teams to enable monitoring,

Qualifications

• Experience with Elastic Stack and data engineering technologies such as Logstash, Beats, Kafka or similar.
• Expertise in Elastic data modelling, indexing and performance optimisation.
• Experience designing scalable log collection and processing architectures.
• Knowledge of data governance, retention and security telemetry across cloud, endpoint and network.

Responsibilities

• Acting as the technical authority and SME for security data within the Elastic Security ecosystem
• Designing, implementing and maintaining scalable security data ingestion pipelines into Elastic SIEM
• Owning the onboarding, tuning, normalisation and stabilisation of security data feeds across cloud, endpoint, network and SaaS sources
• Defining and continuously improving data quality standards to support detection, investigation and threat hunting
• Contributing to the operation, performance and evolution of the Elastic Security platform
• Applying software engineering and scripting skills, for example in Python or Bash, to automate ingestion, validation, monitoring and operational workflows
• Supporting configuration as code and infrastructure as code to improve consistency and scalability across security tooling
• Driving the development of a security data strategy aligned with business and regulatory requirements

Skills

Elastic Stack

Data engineering

Security data pipelines

Python

Scripting

Security data governance

Tools

Logstash

Beats

Kafka

Job description

G-Research in London is seeking a Security Data and Platform Engineer to combine security engineering with deep knowledge of security data pipelines and Elastic Security, ensuring telemetry across cloud, hybrid and corporate environments remains reliable and cost‑effective.

You will own onboarding, tuning and stabilisation of security data feeds, contribute as a general Security Engineer, and work with SOC, CSIRT, Detection Engineering, Platform Engineering and Cloud teams to enable monitoring,