Experienced Security Data Platform Engineer
Job Description
[Up to c. £225k Comp Package | Office-Led Working - 3 Remote Days Per Month]
Role Overview
We’re representing a quantitative research and technology organisation hiring a Senior Security Data Platform Engineer into the team responsible for the data and third-party platforms used across its cyber-security function.
The immediate mandate centres on a significant Elastic Security programme. This person will take senior technical ownership across telemetry ingestion, data pipelines and the underlying Elastic environment, ensuring security data can be onboarded, structured, retained and queried reliably at substantial scale. The challenge goes considerably beyond administering a SIEM or creating detections - it requires deep understanding of how the platform itself behaves in production. Over time, the remit will extend beyond Elastic into a wider security-platform portfolio spanning PKI, threat intelligence, digital forensics and emerging uses of machine learning and AI. It should suit an engineer who combines specialist security-data expertise with broader platform engineering instincts and enough software capability to automate and integrate complex systems...
Role Snapshot
- Take senior technical ownership of the security-data platform, with the initial priority being migration, expansion and operational maturity of the Elastic Security environment
- Bring typically 6-12 years across security platform engineering, SIEM engineering, logging/observability infrastructure, data engineering or closely related production platform roles
- Demonstrate deep hands-on Elasticsearch and Elastic Stack expertise, including the underlying ingestion, indexing, storage, query-performance and operational characteristics
- Engineer and troubleshoot high-volume telemetry flows using technologies such as Kafka, Logstash, Beats and associated integration components across diverse security-data sources
- Improve mappings, data structures, lifecycle policies, retention, pipeline reliability and resource efficiency as the volume and variety of security telemetry grows
- Use scripting and software engineering skills, including Python, Bash, APIs or middleware where appropriate, to automate platform operations and remove fragile manual processes
- Understand how telemetry is consumed by detection engineering, incident response, threat hunting, investigations and wider security operations, and engineer the platform around those production use cases
- Operate effectively within customised infrastructure where substantial systems remain internally managed or on-premises rather than assuming a standard managed-SaaS architecture
- Work within a c. 8 person security platform function and progressively take ownership across additional infrastructure and security technologies beyond the initial Elastic mandate
- (Preferred) Experience with Elastic machine learning, PKI, threat-intelligence platforms, digital-forensics infrastructure or applying ML/AI techniques to large security datasets
...
Apply for this role
All fields marked with * are required.