Xcede
Elasticsearch Consultant
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Elasticsearch SIEM Engineer
Contract: Initial 6 months
Rate: Market rate - Inside IR35
Location: London – Hybrid
We are supporting a leading technology services organisation working with a major telecommunications client that is looking for an experienced Elasticsearch SIEM Engineer.
You will be responsible for designing, developing and supporting scalable Elastic Stack solutions, with a particular focus on security monitoring, log ingestion and SIEM capabilities.
Key responsibilities
- Design, deploy and maintain Elasticsearch, Logstash and Kibana environments
- Develop and optimise Logstash pipelines for security and operational data
- Onboard and enrich logs from cloud, infrastructure, network and security sources
- Create and tune Elastic SIEM detection rules, dashboards and alerts
- Improve cluster performance, resilience, scalability and data retention
- Automate deployments and configuration through Ansible and scripting
- Support containerised Elastic environments running on Kubernetes
- Manage streaming and ingestion workflows using Kafka
- Maintain CI/CD and GitOps processes through GitLab and Argo CD
- Collaborate with SOC, security, platform and infrastructure teams
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Required experience
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Strong hands-on experience with Elasticsearch, Logstash and Kibana
- Experience implementing or supporting Elastic Security/Elastic SIEM
- Strong understanding of data ingestion, parsing, enrichment and alerting
- Experience with Ansible, Kafka and Kubernetes
- Experience using Argo CD and GitLab CI/CD
- Scripting experience with Python, Bash or similar
- Knowledge of Elasticsearch performance tuning, ILM, shards and cluster management
- Strong troubleshooting and stakeholder-management skills
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location