Consulting Architect - Security (EMEA / Public Sector eligible )
Core
Lead hands-on delivery of Elastic Security projects (implementations, migrations, use-case expansions) for government and public sector organizations, designing architectures and integrating with wider security ecosystems.
Role type
Senior Consulting Architect (Security)
Builds
Elastic Security solutions (SIEM, endpoint, cloud security), detection rules, dashboards, and alerting workflows for enterprise and government environments.
Domain
Cybersecurity, Public Sector, Cloud Security
Deliverable
production ML models | product features | dashboards & analysis | client delivery
Required skills
Security architecture design, SIEM/EDR platform deployment, data ingestion (Elastic Agent, Beats, Logstash), detection-as-code (Python, Git, CI/CD), cloud platform management (AWS, Azure, GCP), Linux/Windows administration, stakeholder management, travel readiness
Preferred skills
Advanced Elasticsearch operations, containerized workloads (Kubernetes), Agentic AI/LLM security workflows, Infrastructure-as-Code (Terraform), MSSP experience, security certifications (GIAC, CISSP)
Technologies
Elastic Stack, Python, Git, CI/CD, Kafka, Azure Event Hub, AWS S3, Kubernetes, Terraform, Splunk, MS Sentinel, QRadar, CrowdStrike, MS Defender
Responsibilities
Analyze customer goals and threat landscapes to design security solution architectures; Lead end-to-end delivery of greenfield deployments and migrations from legacy platforms; Develop security content including detection rules and alerting workflows; Establish detection-as-code practices; Mentor fellow consultants and deliver enablement sessions; Partner with sales to assess technical risks and shape opportunities.
Seniority
Senior, hands-on IC
