Senior Security Data Platform Engineer (Elastic Stack)

Techfellow Limited; England; Hybrid; GBP 203,000 - 248,000; Full time

Job summary

Techfellow Limited seeks a Senior Security Data Platform Engineer to lead the Elastic Security environment, focusing on ingestion, storage and querying of security data at scale. You will own telemetry pipelines using Kafka, Logstash and Beats, automate operations with Python and Bash, and extend the platform beyond Elastic into PKI, threat intelligence and ML/AI for security workflows.

The role blends deep security-data expertise with platform engineering, in an office-led hybrid setup with

Qualifications

• 6–12 years across security platform engineering, SIEM engineering or related production platform roles.
• Deep hands-on Elasticsearch and Elastic Stack expertise.
• Experience engineering high-volume telemetry flows with Kafka, Logstash and Beats.
• Ability to automate platform operations using Python, Bash and APIs.
• Understanding how telemetry is consumed by detection engineering, incident response, threat hunting.

Responsibilities

• Take senior technical ownership of the security-data platform, with initial priority on migration, expansion and operational maturity of the Elastic Security environment.
• Engineer and troubleshoot high-volume telemetry flows across diverse security-data sources.
• Improve mappings, data structures, retention policies, pipeline reliability and resource efficiency as telemetry scales.
• Use scripting and software engineering to automate platform operations and reduce manual work.
• Work within a security platform function and expand ownership across additional infrastructure and security technologies beyond Elastic mandate.

Skills

Elasticsearch

Elastic Stack

Python

Bash

APIs

Automation

Security data platform engineering

Security platform engineering

Data pipelines

Tools

Kafka

Logstash

Beats

Job description

Techfellow Limited seeks a Senior Security Data Platform Engineer to lead the Elastic Security environment, focusing on ingestion, storage and querying of security data at scale. You will own telemetry pipelines using Kafka, Logstash and Beats, automate operations with Python and Bash, and extend the platform beyond Elastic into PKI, threat intelligence and ML/AI for security workflows.

The role blends deep security-data expertise with platform engineering, in an office-led hybrid setup with