Security (SIEM, Elastic) Architect - SC Cleared

Sanderson Government and Defence Careers; Warwick; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading technology consultancy is seeking a Security Architect to implement SIEM capabilities using the Elastic Stack. The role involves defining SIEM architecture, deploying ElasticSearch clusters, and integrating with observability tools. Candidates must hold active SC clearance and have demonstrable experience in security monitoring. This position offers a hybrid working environment in Warwick, with a contract of 6-12 months.

Qualifications

• Demonstrable experience architecting SIEM capabilities using the Elastic Stack.
• Must have active SC clearance.
• Experience designing log ingestion pipelines and data models.

Responsibilities

• Define and implement SIEM architecture using Elastic Stack.
• Deploy and configure ElasticSearch clusters and Kibana dashboards.
• Integrate SIEM with cloud-native observability tools.

Skills

SIEM architecture

Elastic Stack (Elasticsearch, Logstash, Kibana)

Security monitoring

Tools

ElasticSearch

AWS CloudWatch

Azure Monitor

Job description

Security (SIEM) Architect

• Location : Warwick, Hybrid
• IR Status : TBC
• Rate : £600 - £800
• Length : 6-12 months, TBC
• Clearance : Must have active SC clearance.

An exciting opportunity has emerged with an organisaiton supplying complex architectural, technical and delivery solutions across the UK Secure Government and Public Sectors.

They are looking to bring in a specialist security archietct, with demonstrable experience of having architected a SIEM capability ustiling the Elasticsearch toolset.

There has been an initial scoping, you will come in and provide a full-scale holistic solution and will have the support of the architetural team that provided the initial scope.

Architecture & Design

• Define and implement SIEM architecture using Elastic Stack (Elasticsearch, Logstash, Kibana, Beats).
• Design log ingestion pipelines, data models, and correlation rules for security monitoring.
• Develop observability frameworks integrating logs, metrics, and traces.

Implementation & Engineering

• Deploy and configure ElasticSearch clusters, Kibana dashboards, and Logstash pipelines.
• Integrate SIEM with cloud-native observability tools (AWS CloudWatch, Azure Monitor, GCP ...