{"id":3798183,"url":"https://alion.io/job/identifi-global-elastic-siem-soc-security-engineerarchitect","title":"Elastic SIEM & SOC Security Engineer/Architect","company":{"id":2445944,"name":"Identifi Global","domain":"identifiglobal.com","url":"https://alion.io/company/identifiglobal-com","size_band":"11-50","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Harrow, United Kingdom"],"countries":["GB"],"hiring_countries":["GB"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Elastic SIEM","optional":false},{"name":"SIEM","optional":false},{"name":"ElasticSearch","optional":true},{"name":"Kibana","optional":true},{"name":"Logstash","optional":true}],"status":"live","first_seen_at":"2026-11-05T10:17:43Z","employer_posted_date":null,"last_verified_at":"2026-11-05T10:17:43Z","board_verified":false,"closed_at":null,"days_open":5,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":5},"description":"Permanent | UK remote with occasional client-site visits | Active SC/DV clearance required\nDesign it, then help build it. This is a hands-on architect role at a leading Elastic partner, shaping SIEM and SOC solutions for UK Defence and NATO environments. You won’t be handing over diagrams and walking away. You’ll own the architecture with the client and stay close to the delivery.\nWhy it’s worth a look\nJoin at a growth moment. The practice has just won major new projects and is expanding its permanent team, so this is a long-term role in a growing capability, not a single assignment.\n\nWork with real specialists. You’ll be part of a team of 30+ SMEs delivering complex security and technology projects.\n\nSerious, varied work. UK Defence, international NATO environments, and the chance to contribute to wider enterprise projects too.\n\nGreenfield and rescue. Build new SIEM environments from scratch and turn around existing ones that need recovering.\n\nMostly remote. UK-based remote working, with some visits to client sites.\n\nYour work counts more than your job title. They’ll judge you on what you’ve personally designed and delivered, not on what your last role was called.\n\nNo Elastic cert? You can still apply. If you meet the core clearance, architecture and Elastic requirements, a missing certification won’t rule you out.\n\nWhat you’ll do\nDepending on the engagement, you’ll:\nWork directly with end clients to understand their technical, operational and security requirements\n\nDesign SOC and SIEM architectures built on Elastic/ELK\n\nTurn those requirements into practical technical solutions\n\nGuide implementation and delivery as the SME\n\nSupport greenfield SIEM implementations\n\nAssess existing environments and help recover or improve them\n\nWork alongside the established specialist SME team\n\nRoll your sleeves up on technical delivery where it’s needed\n\nExplain architectural decisions, technical risks and recommendations to client stakeholders\n\nHelp projects succeed in complex, security-sensitive environments\n\nWhat you’ll bring\nCurrent, active DV clearance\n\nStrong SOC and/or SIEM architecture experience\n\nProfessional experience with Elastic/ELK\n\nA track record of designing SIEM/SOC solutions or architectures\n\nClear evidence of what you’ve personally designed and delivered, including the scale, complexity and outcomes involved\n\nConfidence working at SME/Architect level directly with end clients\n\nStrong communication and stakeholder management skills\n\nExperience in complex, security-sensitive environments\n\nBonus points for\nA relevant Elastic certification\n\nHands-on Elastic engineering and implementation\n\nElasticsearch, Kibana and Logstash\n\nElastic Agent / Beats\n\nSIEM implementation and optimisation\n\nTroubleshooting or recovering existing Elastic environments\n\nWider SOC architecture and security tooling experience\n\nA straightforward interview process\nThree conversations, no surprises:\nAn initial chat about the role and whether it’s a good fit\n\nA technical interview with the consultancy’s lead SIEM SME\n\nA technical interview with a lead Defence SIEM SME\n\nYou’ll hear more about the organisation, team and projects as the process moves on, where appropriate.","description_format":"text","description_chars":3195,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Security Operations"],"lifecycle":[{"event":"open","at":"2026-11-05T10:21:22Z"}],"visa":[],"liveness":{"score":49,"band":"ok","label":"Likely open","p_open":1,"p_active":0.516,"p_room":0.945,"age_days":4,"expected_fill_days":7,"reasons":["seen:4","agency","win:mid"],"computed_at":"2026-11-10T06:52:35Z"},"pay":null,"html_url":"https://alion.io/job/identifi-global-elastic-siem-soc-security-engineerarchitect","json_url":"https://alion.io/job/identifi-global-elastic-siem-soc-security-engineerarchitect.json","meta":{"generated_at":"2026-11-10T18:33:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8583,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2445944},"rest":"https://alion.io/mcp/rest/get_company?id=2445944"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fidentifi-global-elastic-siem-soc-security-engineerarchitect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fidentifi-global-elastic-siem-soc-security-engineerarchitect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fidentifi-global-elastic-siem-soc-security-engineerarchitect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/identifi-global-elastic-siem-soc-security-engineerarchitect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fidentifi-global-elastic-siem-soc-security-engineerarchitect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3798183}},{"tool":"search_jobs","arguments":{"company":"identifiglobal.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3798183},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}