Opportunity at
ElasticPrincipal Solutions Architect, Security Specialist
This full-time Principal Solutions Architect role focuses on security, specifically SIEM and security analytics, and is listed as on-site in the United States. It combines technical…
Career Tools
About This Role
This full-time Principal Solutions Architect role focuses on security, specifically SIEM and security analytics, and is listed as on-site in the United States. It combines technical architecture with consultative selling, helping customers secure their data and infrastructure, improve incident response and develop up-to-date, scalable security platforms. The architect designs solutions that use Elastic's AI capabilities to help customers respond to incidents more effectively and to use the Elastic Security platform…
Job Description
This full-time Principal Solutions Architect role focuses on security, specifically SIEM and security analytics, and is listed as on-site in the United States. It combines technical architecture with consultative selling, helping customers secure their data and infrastructure, improve incident response and develop up-to-date, scalable security platforms.
The architect designs solutions that use Elastic's AI capabilities to help customers respond to incidents more effectively and to use the Elastic Security platform for their use cases. Other duties include running proof-of-value projects that show how detection, AI and incident response features shorten the time an analyst needs to reach a decision. The role also covers talks, articles and other outlets that position Elastic as a leader in SIEM and analytics.
Working inside the Solutions Architecture team, the holder encourages knowledge sharing and keeps up with changes in SIEM, analytics and related technology. Travel of 30 to 50 percent of the time is expected.
The posting suits a senior security professional with at least fifteen years of experience designing enterprise SIEM solutions, a working knowledge of SOC workflows and forensic, troubleshooting and threat mitigation work. Experience with behavioural analytics and machine learning, responding to RFI and RFP requests and strong presentation skills for technical and non-technical audiences are also listed. Credentials like CISSP, CEH or GIAC are helpful extras.
Responsibilities
- Design and implement security solutions that apply Elastic's AI advances to improve incident response
- Use the Elastic Security platform to meet customer use case requirements and improve operational efficiency
- Run proof-of-value projects that show the value of detection, AI and incident response features
- Present expertise through talks, blog posts and other channels to position Elastic in SIEM and analytics
- Build a team culture of cooperation inside Solutions Architecture and across departments
- Track changes in SIEM, analytics and related technologies to keep solutions current
Requirements
- Fifteen or more years of experience designing enterprise-level SIEM solutions
- Deep hands-on use of SIEM products and vendor offerings in large organisations
- Understanding of how AI affects SIEM and analytics solutions
- Solid knowledge of how SOC teams work day to day and the problems they face
- Ability to build detection content that meets use case requirements
- Grounding in forensic investigation, troubleshooting and threat containment
- Experience with behavioural analytics and machine learning techniques
- Track record in consultative selling, RFI and RFP responses and customer presentations
- Ability to work independently in fast-paced environments
- Willingness to travel 30 to 50 percent of the time
Qualifications
- Credentials like CISSP, CEH or GIAC
Core Skills
Benefits
- Competitive pay set by the work performed, not by previous salary
- Health coverage for employees and their families in many locations
- Scheduling and location flexibility for many roles
- Generous annual vacation allowance
- Company match of up to $2,000 (or local equivalent) for donations and service
- Up to 40 hours a year available for volunteer work
- At least 16 weeks of parental leave
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is this role based?
The listing gives the United States as the location and marks the role as on-site.
How much travel is involved?
The posting says the candidate should be willing to travel 30 to 50 percent of the time.
What experience is required?
The posting asks for fifteen or more years of enterprise SIEM architecture experience, SOC workflow knowledge and consultative selling success.
Is a salary stated?
The posting does not specify a salary.
Are certifications needed?
Credentials like CISSP, CEH or GIAC are described as a plus rather than a requirement.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.