Skill Compatibility Diagnostics
Live technical match evaluated against role architecture & expected skills.
Consider reviewing the missing technical prerequisites before submitting your application.
Your skills are processed strictly in-memory and never saved to a database.
About the Role
Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI.
What is The Role
Elastic Security is one of the fastest-growing parts of our business, and our customers (including government and public sector organisations) rely on our Security Solution to modernise their SOC, threat detection, and response capabilities.
You will lead the hands-on delivery of Elastic Security projects (new implementations, migrations, and use-case expansions) from discovery through architecture design and build. Along the way, you'll develop trusted relationships with senior stakeholders and work closely with our Services, Engineering and Sales teams.
Elastic is a remote-first company, but many of the projects you'll deliver might require onsite availability, making the role hybrid in practice, varying by project, with travel of up to 60%.
Some of these engagements, given the organisations involved, also require national security screening or clearance; eligibility to obtain one in your country of employment is a strong advantage, and Elastic will sponsor the process where required.
Key Technical Responsibilities
- check_circle Analyse customer goals, pain points, existing architecture, and threat landscape, translating them into technical requirements
- check_circle Design Elastic Security solution architectures (SIEM, endpoint, cloud security) that integrate with the customer's wider security ecosystem
- check_circle Advise on the customer's security strategy and own the Elastic side of it, aligning recommendations through regular sessions with senior and key stakeholders
- check_circle Lead hands-on delivery of Elastic Security projects end-to-end, including greenfield deployments and migrations from legacy SIEM/EDR platforms in mission-critical environments
- check_circle Deploy and secure the Elastic platform: cluster architecture, RBAC and role mapping, single sign-on, private connectivity, and hardening for enterprise and government environments
- check_circle Architect and build large-scale data ingestion with Elastic Agent, Beats, and Logstash, normalising data to ECS and integrating sources such as Kafka, Azure Event Hub, and AWS S3
- check_circle Develop security content aligned to the customer's threat landscape: detection rules, dashboards, and alerting workflows
- check_circle Drive security migrations from competing platforms, applying deep knowledge of Elastic's capabilities to translate each use case into its best form
- check_circle Establish detection-as-code practices for customers managing detections programmatically: developing, testing, versioning, and deploying detection content with Python, Git, and CI/CD pipelines
- check_circle Apply and enable Elastic's Agentic AI capabilities to accelerate customers' detection and response
- check_circle Identify and deliver new security use cases as customers mature their cyber defence journey with Elastic
- check_circle Deliver engagements on time and within the agreed Statement of Work scope, surfacing opportunities for follow-on work
- check_circle Communicate confidently with stakeholders from SOC engineers up to CISO / C-suite level
- check_circle Partner with Elastic Sales and pre-sales to assess technical risks and shape opportunities
- check_circle Feed field insight back to Elastic Engineering, Product Management, and Support to drive feature enhancements
- check_circle Mentor and share knowledge with fellow Elastic consultants across a highly distributed team
- check_circle Lead or assist with demos and proof-of-concepts that showcase the value of the Elastic Stack, and deliver enablement sessions and hands-on workshops
Prerequisites & Qualifications
- check Minimum of 5 years' experience as a Consulting Architect, Senior Consultant, or in a senior IT technical leadership role, delivering and executing professional services engagements, ideally in the security domain
- check Solid experience deploying Elastic Security or comparable SIEM platforms or EDR platforms, or at least 2 years as a Security Analyst / Detection Engineer in a threat detection and response role
- check An architect's view of the security ecosystem across varied customer environments: SOAR, vulnerability management, penetration testing, ticketing, and security policies
- check Scripting skills, ideally in Python, and exposure to modern delivery practices such as Infrastructure-as-Code and CI/CD are strongly preferred
- check Hands-on experience with Linux and Windows operating systems, and on-prem and/or public cloud platforms (AWS, Azure, GCP)
- check Strong customer advocacy, relationship-building, and communication skills
- check Eligibility to obtain national security clearance in your country of employment
- check Willingness to travel and work onsite with customers (up to 60% of the time), combined with comfort working remotely in a highly distributed team
- check Strong proficiency in both English and the local market language
About Elastic Greenhouse Board
Verified hiring organization details.
Elastic Greenhouse Board is a technology and software company based in the United States, operating as an active hiring employer.