SIEM Technical Consultant (Architect)

Sanderson Government and Defence; Swindon; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading government consultancy in the UK seeks an experienced SIEM Technical Consultant to join a high-profile MOD programme. You will lead hands-on configuration of the Elastic stack, tuning dashboards, and collaborating with stakeholders to maximize product value. The role demands active DV Clearance and strong expertise with Elastic products. This position is critical for ensuring continuity and capability in the security operations environment, offering an opportunity to shape daily platform usage.

Qualifications

• Active DV Clearance is essential.
• Demonstrable experience with the Elastic product suite is required.
• Confidence in hands-on SIEM configuration and dashboard management.

Responsibilities

• Lead configuration and management of the Elastic stack.
• Build, tune, and maintain dashboards and alerts.
• Work closely with stakeholders to enhance product usage.

Skills

Experience with Elastic product suite

Hands-on SIEM configuration

Dashboard building and tuning

Job description

Job Description

We're looking for an experienced SIEM Technical Consultant to join a high-profile MOD programme, supporting a key transition as an existing on‑site consultant steps up into an Architect role. This is a crucial position, ensuring continuity, capability, and momentum across the security operations environment.

You’ll be working hands‑on with the Elastic product suite, configuring, optimising, and enabling the MOD to get maximum value from their investment. This is not a passive advisory role – you’ll be embedded and instrumental in shaping how the platform is used day‑to‑day.

What You’ll Be Doing

• Leading hands‑on configuration and management of the Elastic stack

• Building, tuning, and maintaining dashboards, alerts, and visualisations

• Working closely with MOD stakeholders to help them fully utilise the product set

• Acting as a subject‑matter expert alongside an existing on‑site partner team

• Providing specialist insight and technical depth on top of partner‑delivered services

• Supporting the newly promoted Architect by absorbing operational demand and ensuring a smooth transition

What You’ll Bring

• Active DV Clearance (essential)

• Strong, demonstrable experience with the Elastic product suite

• Confidence in hands‑on SIEM configuration, dashboardin...