Requirements

Strong experience with Elastic Stack and data engineering technologies such as Logstash, Beats, Kafka, or similar
Expertise in Elastic data modeling, indexing, and performance optimization
Experience designing scalable log collection and processing architectures
Knowledge of data governance, retention, and security telemetry across cloud, endpoint, and network
Experience with Azure, AWS, GCP, or hybrid environments

What You'll Be Doing

Acting as the technical authority and SME for security data within the Elastic Security ecosystem
Designing, implementing, and maintaining scalable security data ingestion pipelines into Elastic SIEM
Owning the onboarding, tuning, normalization, and stabilization of security data feeds across various sources
Defining and continuously improving data quality standards to support detection, investigation, and threat hunting
Contributing to the operation, performance, and evolution of the Elastic Security platform
Applying software engineering and scripting skills to automate ingestion, validation, and monitoring workflows
Supporting configuration as code and infrastructure as code to improve consistency and scalability across security tooling
Driving the development of a security data strategy aligned with business and regulatory requirements

Strategic mindset with a focus on long-term data quality and platform evolution
Strong communication skills, with the ability to explain complex concepts to technical and non-technical stakeholders
Collaborative approach with experience mentoring others and working across teams to improve security outcomes