Consulting Architect - Security (EMEA / Public Sector eligible )

Elastic · Germanysenior

En corto

▸Arquitecto de seguridad especializado en implementaciones de Elastic Security para sectores públicos y empresas.
▸Diseña, implementa y migra soluciones SIEM, endpoint y de seguridad en la nube con enfoque en entornos críticos.
▸Requiere elegibilidad para acreditaciones de seguridad nacional (Elastic las respalda si son necesarias).

Fluent English required for customer and team collaboration.

En ~1 minuto te damos: quién te entrevista, las preguntas probables con respuestas desde tu CV, y tu CV adaptado a esta vacante. Gratis, sin tarjeta.

🎧¿Llegás a la entrevista? Llevá el copiloto. Nuestra extensión escucha la entrevista en vivo y te muestra anclas de 3-4 palabras desde tu CV y tu preparación — mirás, conectás, hablás. Gratis. Ver la extensión →

¿Qué piden?

✓Experiencia en arquitectura de soluciones SIEM y seguridad en entornos empresariales o públicos.
✓Conocimiento profundo de Elastic Security, Elastic Agent, Beats y Logstash.
✓Capacidad para liderar proyectos de implementación y migración desde cero o desde plataformas legacy.
✓Experiencia en diseño de arquitecturas de cluster seguras con RBAC, SSO y conectividad privada.
✓Habilidades de comunicación con stakeholders senior y capacidad para traducir necesidades de negocio en arquitectura técnica.
✓Conocimiento en detección de amenazas, reglas de detección, dashboards y workflows de alerta.

¿No cumplís todo? Es lo normal — tu dossier gratis te dice qué gaps tenés y cómo cubrirlos en la entrevista.

Elastic SecurityElastic AgentBeatsLogstashECSKafkaAzure Event HubAWS S3PythonGit

¿A quién escribirle en Elastic?

Tu dossier gratis identifica a las personas que te entrevistarían — con su background, qué valoran y cómo escribirles para destacar antes de aplicar.

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role Elastic Security is one of the fastest-growing parts of our business, and our customers (including government and public sector organisations) rely on our Security Solution to modernise their SOC, threat detection, and response capabilities. You will lead the hands-on delivery of Elastic Security projects (new implementations, migrations, and use-case expansions) from discovery through architecture design and build. Along the way, you'll develop trusted relationships with senior stakeholders and work closely with our Services, Engineering and Sales teams. Elastic is a remote-first company, but many of the projects you'll deliver might require onsite availability, making the role hybrid in practice, varying by project, with travel of up to 60%. Some of these engagements, given the organisations involved, also require national security screening or clearance; eligibility to obtain one in your country of employment is a strong advantage, and Elastic will sponsor the process where required. What You Will Be Doing Assess and Design • Analyse customer goals, pain points, existing architecture, and threat landscape, translating them into technical requirements • Design Elastic Security solution architectures (SIEM, endpoint, cloud security) that integrate with the customer's wider security ecosystem • Advise on the customer's security strategy and own the Elastic side of it, aligning recommendations through regular sessions with senior and key stakeholders Implement and Deliver • Lead hands-on delivery of Elastic Security projects end-to-end, including greenfield deployments and migrations from legacy SIEM/EDR platforms in mission-critical environments • Deploy and secure the Elastic platform: cluster architecture, RBAC and role mapping, single sign-on, private connectivity (private links, VPC peering), and hardening for enterprise and government environments • Architect and build large-scale data ingestion with Elastic Agent, Beats, and Logstash, normalising data to ECS and integrating sources such as Kafka, Azure Event Hub, and AWS S3 • Develop security content aligned to the customer's threat landscape: detection rules, dashboards, and alerting workflows • Drive security migrations from competing platforms, applying deep knowledge of Elastic's capabilities to translate each use case into its best form, whether through feature parity mapping or full redesign • Establish detection-as-code practices for customers managing detections programmatically: developing, testing, versioning, and deploying detection content with Python, Git, and CI/CD pipelines • Apply and enable Elastic's Agentic AI capabilities (AI Assistant, Attack Discovery, agent-driven workflows) to accelerate customers' detection and response Grow and Collaborate • Identify and deliver new security use cases as customers mature their cyber defence journey with Elastic • Deliver engagements on time and within the agreed Statement of Work (SOW) scope, surfacing opportunities for follow-on work • Communicate confidently with stakeholders

No apliques sin prepararte

Investigamos quién te entrevista, adaptamos tu CV y te ensayamos en vivo — gratis la primera.