Consulting Architect - Security (EMEA / Public Sector eligible )

Identify and deliver new security use cases as customers mature their cyber defence journey with Elastic

Deliver engagements on time and within the agreed Statement of Work (SOW) scope, surfacing opportunities for follow-on work

Communicate confidently with stakeholders from SOC engineers up to CISO / C-suite level

Partner with Elastic Sales and pre-sales to assess technical risks and shape opportunities

Feed field insight back to Elastic Engineering, Product Management, and Support to drive feature enhancements

Mentor and share knowledge with fellow Elastic consultants across a highly distributed team

Lead or assist with demos and proof-of-concepts that showcase the value of the Elastic Stack, and deliver enablement sessions and hands-on workshops that make customer teams self-sufficient

Minimum of 5 years' experience as a Consulting Architect, Senior Consultant, or in a senior IT technical leadership role, delivering and executing professional services engagements, ideally in the security domain

Solid experience deploying Elastic Security or comparable SIEM platforms (e.g., Splunk, MS Sentinel, QRadar, ArcSight) and/or EDR platforms (e.g., CrowdStrike, MS Defender), or at least 2 years as a Security Analyst / Detection Engineer in a threat detection and response role

An architect's view of the security ecosystem across varied customer environments: SOAR, vulnerability management, penetration testing, ticketing, and security policies, and how they connect in a SOC

Scripting skills, ideally in Python, and exposure to modern delivery practices such as Infrastructure-as-Code and CI/CD are strongly preferred

Hands-on experience with Linux and Windows operating systems, and on-prem and/or public cloud platforms (AWS, Azure, GCP)

Strong customer advocacy, relationship-building, and communication skills, with the ability to pivot easily between delivery and strategic engagements

Eligibility to obtain national security clearance in your country of employment (screening sponsored by Elastic where required)

Willingness to travel and work onsite with customers (up to 60% of the time), combined with comfort working remotely in a highly distributed team

Strong proficiency in both English (our company-wide operating language) and the local market language.

Experience with advanced Elasticsearch operations: cluster architecture, shard management, data ingestion, and data tiering at scale

Experience with detection-as-code: authoring, testing, and versioning detection content managed in Git

Experience automating deployments and lifecycle management with Python, Terraform, and CI/CD tooling (e.g., GitLab pipelines)

Experience deploying and operating containerised workloads on Kubernetes, cloud-managed or self-hosted (EKS, AKS, GKE, OpenShift)

Experience with Agentic AI and LLM-based security workflows: AI assistants, automated triage, and agent-driven investigation

Experience as a Tier-2/Tier-3 SOC Analyst, Threat Hunter, or DevSecOps Engineer

Experience in large distributed environments or MSSPs, from architecture through deployment

Experience delivering enablement sessions, technical workshops, or product training to technical audiences

Elastic Certified Engineer certification, or security certifications such as GIAC or CISSP

#LI-PF1

As a distributed company, diversity drives our identity. Whether you’re looking to launch a new career or grow an existing one, Elastic is the type of company where you can balance great work with great life. Your age is only a number. It doesn’t matter if you’re just out of college or your children are; we need you for what you can do.

We strive to have parity of benefits across regions and while regulations differ from place to place, we believe taking care of our people is the right thing to do.

Competitive pay based on the work you do here and not your previous salary

Health coverage for you and your family in many locations

Ability to craft your calendar with flexible locations and schedules for many roles

Generous number of vacation days each year

Increase your impact - We match up to $2000 (or local currency equivalent) for financial donations and service

Up to 40 hours each year to use toward volunteer projects you love

Embracing parenthood with minimum of 16 weeks of parental leave

Different people approach problems differently. We need that. Elastic is an equal opportunity employer and is committed to creating an inclusive culture that celebrates different perspectives, experiences, and backgrounds. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, pregnancy, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, disability status, or any other basis protected by federal, state or local law, ordinance or regulation.

We welcome individuals with disabilities and strive to create an accessible and inclusive experience for all individuals. To request an accommodation during the application or the recruiting process, please email candidate_accessibility@elastic.co . We will reply to your request within 24 business hours of submission.

Applicants have rights under Federal Employment Laws, view posters linked below: Family and Medical Leave Act (FMLA) Poster; Pay Transparency Nondiscrimination Provision Poster; Employee Polygraph Protection Act (EPPA) Poster and Know Your Rights (Poster)

Elasticsearch develops and distributes technology and information that is subject to U.S. and other countries’ export controls and licensing requirements for individuals who are located in or are nationals of the following sanctioned countries and regions: Belarus, Cuba, Iran, North Korea, Syria, or Russia, including the Ukrainian territories annexed by Russia (The Crimea region of Ukraine, The Donetsk People's Republic (DNR), The Luhansk People's Republic (LNR), Kherson or Zaporizhzhia). If you are located in or are a national of one of the listed countries or regions, an export license may be required as a condition of your employment in this role. Please note that national origin and/or nationality do not affect eligibility for employment with Elastic.

Please see here for our Privacy Statement.