Senior Elastic SIEM & Ingest Engineer

As a Senior Elastic SIEM & Ingest Engineer at our company in the UK, you will play a crucial role in parsing and enriching custom log formats into ECS. Your responsibilities will include developing Logstash pipeline, Elasticsearch ingest node pipelines, and building custom ingestion pipelines for Elastic SIEM. Your expertise in SIEM data onboarding, data normalization, and enrichment will be essential in supporting detection principles. Key Responsibilities: - Obtain Active Elastic Certified Engineer certification - Develop Logstash pipeline for data processing - Create Elasticsearch ingest node pipelines - Build custom ingestion pipelines for Elastic SIEM - Onboard SIEM data efficiently - Normalize and enrich data for effective analysis - Provide support for detection principles Qualifications Required: - Active Elastic Certified Engineer certification - Deep expertise in parsing and enriching custom log formats into ECS - Strong hands-on experience with Logstash and Elasticsearch - Proven experience in building custom ingestion pipelines for Elastic SIEM - Strong understanding of SIEM data onboarding, data normalization, and detection support principles Good-to-Have Skills: - Experience in building SIEM detections/use cases using Detection as Code - Knowledge of Terraform for infrastructure provisioning - Exposure to Elastic Cloud on Kubernetes (ECK) using Helm charts - Familiarity with security analytics, alerting logic, and detection engineering workflows As a Senior Elastic SIEM & Ingest Engineer at our company in the UK, you will play a crucial role in parsing and enriching custom log formats into ECS. Your responsibilities will include developing Logstash pipeline, Elasticsearch ingest node pipelines, and building custom ingestion pipelines for Elastic SIEM. Your expertise in SIEM data onboarding, data normalization, and enrichment will be essential in supporting detection principles. Key Responsibilities: - Obtain Active Elastic Certified Engineer certification - Develop Logstash pipeline for data processing - Create Elasticsearch ingest node pipelines - Build custom ingestion pipelines for Elastic SIEM - Onboard SIEM data efficiently - Normalize and enrich data for effective analysis - Provide support for detection principles Qualifications Required: - Active Elastic Certified Engineer certification - Deep expertise in parsing and enriching custom log formats into ECS - Strong hands-on experience with Logstash and Elasticsearch - Proven experience in building custom ingestion pipelines for Elastic SIEM - Strong understanding of SIEM data onboarding, data normalization, and detection support principles Good-to-Have Skills: - Experience in building SIEM detections/use cases using Detection as Code - Knowledge of Terraform for infrastructure provisioning - Exposure to Elastic Cloud on Kubernetes (ECK) using Helm charts - Familiarity with security analytics, alerting logic, and detection engineering workflows