7 days ago
Canada (city not specified)Senior
Responsibilities
- Contribute to the architecture, technical design, planning, execution, and production delivery of major security components in the Elasticsearch core engine.
- Develop foundational security models for authentication, authorization, identity management, cryptography, and data access management.
- Optimize security performance at scale across distributed systems and ensure robust tenant and data isolation.
- Apply cryptographic solutions to customer use cases and monitor evolving security best practices.
- Collaborate with engineering, product, and InfoSec teams to embed security into customer features and identify, assess, and remediate vulnerabilities.
- Use AI-driven tools to automate vulnerability triage, prioritization, and preliminary investigation.
Requirements
- Deep knowledge of Java internals, JVM memory management, concurrency models, and high-performance, thread-safe, lock-free programming.
- Experience building scalable and performant authorization systems for high concurrency and large permission sets, including credential and token validation.
- Strong understanding of distributed systems security, node-to-node mutual trust, zero-trust transport, partition tolerance, and cluster state propagation.
- Deep knowledge of OAuth 2.0 and SAML edge identity protocols.
- Proven experience using AI to accelerate development, debug complex systems, and optimize code.
- Ability to collaborate across functions, work across projects and codebases, and operate autonomously in a distributed team.
- Knowledge of cipher suites, TLS handshakes, PKI, certificate lifecycle management, cryptographic methods, and post-quantum cryptography is preferred.
- Experience mapping engine-level technical controls to FedRAMP, FIPS 140, and SOC 2 requirements is preferred.
- Experience with data-store or search-engine internals is preferred.
Benefits
- Base salary range of $128,300–$203,000 CAD with no variable compensation component; the role is also eligible for Elastic’s stock program.
- Company-matched RRSP contributions with dollar-for-dollar matching up to 6% of eligible earnings.
- Distributed-company work environment with flexible locations and schedules for many roles.
- Health coverage in many locations and a generous number of vacation days.
- Donation matching up to $2,000 or local currency equivalent and up to 40 hours annually for volunteer projects.
- At least 16 weeks of parental leave.
About Elastic
Elastic builds the Elasticsearch-based platform for enterprise search, observability (logging, metrics, APM), and security (SIEM/endpoint). It sells subscriptions and Elastic Cloud managed services with usage-based pricing, combining open source and proprietary features through Elasticsearch and Kibana. Founded in 2012 and headquartered in San Francisco, Elastic is publicly traded on the NYSE and is used by more than half of the Fortune 500.