Security Consulting Architect — Remote & Onsite Ready

Elastic; Amsterdam; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Health coverage for you and family

Flexible locations and schedules

Generous vacation days

Job summary

Elastic Security is expanding its Consulting Architect team. You will lead hands-on delivery of security projects, from discovery through architecture design and build, for government and public sector customers where eligible.

The role combines client-facing leadership with deep technical delivery across SIEM, EDR, cloud security, and data ingestion pipelines. Remote-first with hybrid arrangements by project, travel up to 60%, and eligibility for national security screening.

Qualifications

• 5+ years in consulting architecture or senior IT leadership with a security focus.
• Excellent English and strong communication with stakeholders.
• Experience deploying security solutions (SIEM/EDR) and cloud security.
• Hands-on with Linux/Windows, on-prem and cloud (AWS/Azure/GCP).
• Experience with IaC and modern delivery practices (Git, CI/CD).

Responsibilities

• Assess and design Elastic Security architectures (SIEM, EDR, cloud security) for customers.
• Lead end-to-end delivery of security projects including deployments and migrations.
• Architect and build data ingestion and security content tailored to customer threats.
• Drive detection-as-code practices and enable agentic AI features to accelerate response.
• Collaborate with Sales/Pre-Sales and mentor distributed team members.
• Engage with stakeholders up to CISO level and ensure on-time delivery.

Skills

Security architecture

English proficiency

Communication skills

Cloud platforms (AWS/Azure/GCP)

CI/CD tooling

Tools

Linux

Windows

Kubernetes

Terraform

CI/CD

Job description

Elastic Security is expanding its Consulting Architect team. You will lead hands-on delivery of security projects, from discovery through architecture design and build, for government and public sector customers where eligible.

The role combines client-facing leadership with deep technical delivery across SIEM, EDR, cloud security, and data ingestion pipelines. Remote-first with hybrid arrangements by project, travel up to 60%, and eligibility for national security screening.