Consulting Architect, Security

Elastic

Confirmed live 2 days ago High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Posted
9 days ago
Freshness
Confirmed live 2 days ago

Market check

Salary context

How this pay compares to similar roles

Similar $183k
$124k most similar roles pay here $235k

This listing doesn't post a salary. Most similar roles pay $151,206–$214,100.

Based on 240 similar postings.

Employer

About Elastic

Elastic is the company behind Elasticsearch and the Elastic Stack (Elasticsearch, Kibana, Beats, and Logstash). It sells search, observability, and security products built on that search engine, primarily through its Elastic Cloud managed service.

Elastic currently has 240 open roles on FindRole.

Listed pay typically runs $133,100–$210,600 across 91 roles with salary data.

Most-posted roles

View all roles at Elastic

At a glance

TL;DR · Consulting Architect, Security

Consulting Architect - Security (EMEA / Public Sector eligible) joins the Elastic Security team to lead the hands-on delivery of security projects, including new implementations, migrations, and use-case expansions. This role involves analyzing customer goals and threat landscapes to design solution architectures for SIEM, endpoint, and cloud security. You will build large-scale data ingestion using Elastic Agent, Beats, and Logstash while normalizing data to ECS from sources like Kafka, Azure Event Hub, and AWS S3. Key responsibilities include developing detection rules, dashboards, and alerting workflows, as well as implementing detection-as-code practices using Python, Git, and CI/CD pipelines. The role requires expertise in Linux, Windows, and cloud platforms like AWS, Azure, and GCP to solve complex security challenges for government and public sector organizations by modernizing their SOC and threat detection capabilities.

What you'll do

  • Translate customer goals, pain points, and threat landscapes into technical requirements and solution architectures.
  • Design and implement Elastic Security solutions including SIEM, endpoint, and cloud security integrations.
  • Lead end-to-end delivery of greenfield deployments and migrations from legacy SIEM/EDR platforms.
  • Configure and secure the Elastic platform using RBAC, SSO, and private connectivity for enterprise environments.
  • Build large-scale data ingestion pipelines using Elastic Agent, Beats, and Logstash while normalizing data to ECS.
  • Develop security content including detection rules, dashboards, and alerting workflows tailored to customer needs.
  • Establish detection-as-code practices using Python, Git, and CI/CD pipelines for automated deployment.
  • Deploy Agentic AI capabilities to accelerate customer detection and response workflows.

What we're looking for

  • Minimum 5 years of experience as a Consulting Architect, Senior Consultant, or in a senior IT technical leadership role.
  • Experience deploying Elastic Security or comparable SIEM/EDR platforms, or at least 2 years as a Security Analyst or Detection Engineer.
  • Proficiency in scripting with Python and exposure to Infrastructure-as-Code and CI/CD pipelines.
  • Hands-on experience with Linux, Windows, and public cloud platforms such as AWS, Azure, or GCP.
  • Ability to communicate effectively with stakeholders ranging from SOC engineers to C-suite executives.
  • Eligibility to obtain national security clearance in your country of employment.
  • Fluency in English and the local market language.
  • Optional certifications include Elastic Certified Engineer, GIAC, or CISSP.

More like this

Similar roles

Consulting Architect, Security

Elastic

Canberra, Australia 18 days ago
Elasticsearch Lucene Python Go JavaScript Java AWS Azure GCP OpenStack Linux Windows Chef Puppet DevOps SIEM MITRE ATT&CK
5+ yrs exp

Senior Solutions Architect, Security (SIEM)

Elastic

10 days ago
SIEM Machine Learning Behavioral Analytics Incident Response Security Architecture Forensic Analysis Threat Mitigation SOC Workflows Analytics RFI RFP CISSP CEH GIAC
10+ yrs exp

Agentic AI Engineer

Elastic

50 days ago $94,300$149,200
Elasticsearch RAG LangChain LangGraph LangSmith Python TypeScript Terraform AWS Azure GCP Docker Kubernetes CI/CD LLM Multi-Agent Orchestration Model Context Protocol (MCP) Observability VPC IAM