Elastic Security Platform Engineer

Malomatia; Doha; On-site; QAR 220,000 - 360,000; Full time

Job summary

Malomatia is seeking an experienced EDR Platform Engineer-Elastic Security to administer and enhance an enterprise Elastic Security and Endpoint Detection & Response environment. The role demands strong Elastic expertise, Linux administration, and cybersecurity knowledge to improve detection, coverage, and incident-response readiness.

Key responsibilities include managing Elastic Agent deployments, Fleet Server, Elasticsearch clusters, and Kibana applications, while coordinating with SOC and

Qualifications

• 3–5+ years in cybersecurity or related roles.
• Hands-on production experience administering Elastic Stack environments.
• Experience operating EDR or endpoint-security in enterprise environments.
• Bachelor’s degree in Information Technology, Computer Engineering, Information Security or equivalent.

Responsibilities

• Administer and maintain Elastic Security and EDR environments.
• Deploy, configure, and troubleshoot Elastic Agent on Linux and Windows endpoints.
• Manage Elastic Agent via Fleet and Fleet Server, including policies and integrations.
• Monitor agent health, policy status, and data ingestion; troubleshoot issues.
• Configure detection rules to improve coverage and reduce false positives.
• Coordinate upgrades, patches, and run-books; document procedures.
• Collaborate with SOC, infrastructure, and cybersecurity teams; coordinate with vendors as needed.
• Administrate Elasticsearch clusters, indices, templates, and ILM policies.

Skills

Elastic Stack expertise

Linux administration

Cybersecurity fundamentals

SIEM/EDR operations

Windows endpoint security

Education

Bachelor’s degree in IT/CS/InfoSec

Tools

Elastic Stack tools (Elasticsearch, Kibana, Logstash)

Fleet Server

Git / Python scripting

Ansible

Job description

Malomatia is seeking an experienced EDR Platform Engineer-Elastic Security to administer and enhance an enterprise Elastic Security and Endpoint Detection & Response environment. The role demands strong Elastic expertise, Linux administration, and cybersecurity knowledge to improve detection, coverage, and incident-response readiness.

Key responsibilities include managing Elastic Agent deployments, Fleet Server, Elasticsearch clusters, and Kibana applications, while coordinating with SOC and