Senior Elasticsearch SIEM Engineer

Consult; Greater London; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

Consult is seeking an experienced Elasticsearch SIEM Engineer in the United Kingdom to design, develop and support scalable Elastic Stack solutions with a focus on security monitoring and SIEM capabilities.

You will design and maintain Elasticsearch, Logstash and Kibana environments, onboard logs from cloud, infrastructure and security sources, and create SIEM detection rules and dashboards while automating deployments with Ansible and scripting.

Qualifications

Responsibilities

• Design, deploy and maintain Elasticsearch, Logstash and Kibana environments
• Develop and optimise Logstash pipelines for security and operational data
• Onboard and enrich logs from cloud, infrastructure, network and security sources
• Create and tune Elastic SIEM detection rules, dashboards and alerts
• Improve cluster performance, resilience, scalability and data retention
• Automate deployments and configuration through Ansible and scripting
• Support containerised Elastic environments running on Kubernetes
• Manage streaming and ingestion workflows using Kafka
• Maintain CI/CD and GitLab CI/CD pipelines
• Collaborate with SOC, security, platform and infrastructure teams

Skills

SIEM engineering

Security monitoring

Log ingestion

Stakeholder management

Scripting (Python/Bash)

Data parsing/enrichment

Troubleshooting

Education

Bachelor's degree in a relevant field

Tools

Elasticsearch

Logstash

Kibana

Ansible

Kafka

Kubernetes

Argo CD

GitLab CI/CD

Job description

Consult is seeking an experienced Elasticsearch SIEM Engineer in the United Kingdom to design, develop and support scalable Elastic Stack solutions with a focus on security monitoring and SIEM capabilities.

You will design and maintain Elasticsearch, Logstash and Kibana environments, onboard logs from cloud, infrastructure and security sources, and create SIEM detection rules and dashboards while automating deployments with Ansible and scripting.