SIEM Engineer (Elastic)

SIEM Engineer (Elastic) – Hemel Hempstead, UK

• Up to £90,000 Depending on Experience
• Hybrid working, 3 days onsite
• Must be eligible for DV clearance

Our client is a well-established organisation delivering complex, secure technology solutions across enterprise environments. This is an opportunity to take technical ownership of a large-scale, on-premises Elastic estate, supporting critical monitoring, logging, security analytics and observability capabilities. Due to continued investment in their technology platforms, they are looking for an experienced Elastic Stack SME to join the team.

• Salary up to £90,000 DOE
• £5,400 car allowance
• 25 days holiday + bank holidays and your birthday off
• Matched contributory pension up to 6%
• Single private medical cover
• 4 x life insurance
• 3% flexible benefit allowance

As an Elastic Stack SME, you will design, implement, optimise and manage enterprise Elastic Stack platforms across a secure on-premises estate. You will take technical ownership of Elasticsearch clusters, Logstash, Kibana, Beats, Elastic Agent and Fleet, while delivering solutions across SIEM, observability, threat detection and high-volume data ingestion.

You will design highly available and resilient platforms, optimise cluster performance, implement security controls and automation, and provide senior-level technical support. You will also produce HLDs, LLDs, SOPs, build guides, DR plans and operational documentation.

• 5+ years administering enterprise on-premises Elastic Stack environments
• Strong Elasticsearch, Kibana, Logstash, Beats, Elastic Agent and Fleet experience
• Elastic Security (SIEM) and Elastic Observability
• Experience supporting large, highly available Elasticsearch clusters
• Splunk experience
• Linux and Windows Server
• Power Shell, REST APIs, JSON and YAML
• TLS, LDAP, Active Directory and PKI
• Strong troubleshooting, performance optimisation and automation skills
• Experience with VMware and enterprise networking

By applying for this role, you give express consent for us to process and submit (subject to required skills) your application to our client in conjunction with this vacancy only.

• Elastic Stack
• Elasticsearch
• Kibana
• Logstash
• Elastic Security
• Elastic Observability
• SIEM
• Elastic Agent
• Fleet
• Beats
• Splunk
• Linux
• Power Shell
• Ansible
• NSD