Senior Elastic Security & Detection Engineer (SIEM)

About the role

We are looking for a Senior Elastic Security & Detection Engineer to enhance our enterprise security monitoring and detection capabilities using the Elastic Stack. The role involves building, optimizing, and maintaining use cases, dashboards, and data pipelines to strengthen cyber defence.

Key responsibilities

• Administer, maintain and optimise Elastic Stack components (Elasticsearch, Kibana, Logstash, Beats, Elastic Agent) and manage large‑scale clusters.
• Design, develop and test high‑fidelity detection use cases, correlation rules and behavioural analytics aligned with MITRE ATT&CK.
• Perform proactive threat hunting, support incident investigations and create preventive detection mechanisms.
• Develop security dashboards, reports, alerts and ensure proper onboarding and enrichment of new log sources.

Required profile

• 5‑8 years of experience in cyber security, SIEM engineering or detection engineering.
• Strong analytical, problem‑solving skills and ability to work independently while collaborating with SOC and incident response teams.

Required skills

• Elasticsearch, Kibana, Logstash, Beats, Elastic Agent, Elastic Security (SIEM)
• KQL, Lucene, Elasticsearch Query DSL
• Detection rule development, behavioural analytics, threat hunting
• Knowledge of MITRE ATT&CK, Cyber Kill Chain, Windows, Linux, Active Directory, cloud and network security logs