Consulting Architect - Security (EMEA / Public Sector eligible )

The role

You will lead the hands-on delivery of Elastic Security projects including new implementations, migrations, and use-case expansions. You will design solution architectures and develop trusted relationships with senior stakeholders.

What you will do

• Analyse customer goals and design Elastic Security solution architectures
• Advise on customer security strategy and align recommendations with stakeholders
• Lead hands-on delivery of Elastic Security projects end-to-end
• Deploy and secure the Elastic platform including cluster architecture and RBAC
• Architect and build large-scale data ingestion with Elastic Agent, Beats, and Logstash
• Develop security content such as detection rules, dashboards, and alerting workflows
• Drive security migrations from competing platforms
• Establish detection-as-code practices using Python, Git, and CI/CD pipelines
• Apply Elastic's Agentic AI capabilities to accelerate detection and response
• Partner with Sales and pre-sales to assess technical risks and shape opportunities

Required qualifications

• Minimum of 5 years' experience as a Consulting Architect, Senior Consultant, or in a senior IT technical leadership role
• Solid experience deploying Elastic Security or comparable SIEM platforms or at least 2 years as a Security Analyst / Detection Engineer
• An architect's view of the security ecosystem including SOAR, vulnerability management, penetration testing, ticketing, and security policies
• Hands-on experience with Linux and Windows operating systems
• Hands-on experience with on-prem and/or public cloud platforms (AWS, Azure, GCP)
• Strong customer advocacy, relationship-building, and communication skills
• Eligibility to obtain national security clearance in your country of employment
• Willingness to travel and work onsite with customers up to 60% of the time
• Strong proficiency in English and the local market language

Nice to have

• Scripting skills, ideally in Python
• Exposure to modern delivery practices such as Infrastructure-as-Code and CI/CD
• Experience with advanced Elasticsearch operations
• Experience with detection-as-code
• Experience automating deployments with Python, Terraform, and CI/CD tooling
• Experience deploying and operating containerised workloads on Kubernetes
• Experience with Agentic AI and LLM-based security workflows
• Experience as a Tier-2/Tier-3 SOC Analyst, Threat Hunter, or DevSecOps Engineer
• Experience in large distributed environments or MSSPs
• Experience delivering enablement sessions, technical workshops, or product training

Benefits

• Competitive pay
• Health coverage for you and your family in many locations
• Flexible locations and schedules for many roles
• Generous number of vacation days each year
• Match up to $2000 for financial donations and service
• Up to 40 hours each year to use toward volunteer projects
• Minimum of 16 weeks of parental leave

Before you apply

• Eligibility to obtain national security clearance in your country of employment
• Elastic will sponsor the security screening process where required

About the company

Elastic is the Search AI Company that enables everyone to find answers in real time using all their data at scale. The company provides cloud-based solutions for search, security, and observability.