1 month ago
United Kingdom (city not specified)Staff+
Responsibilities
- Own core security initiatives from architecture through production, including technical design and execution of major Elasticsearch security components.
- Develop foundational security models for complex features, including scalable authorization, authentication, identity management, and data access management.
- Optimize security performance in distributed systems and ensure robust tenant and data isolation in shared infrastructure.
- Apply cryptographic solutions and monitor advances in security practices, including cryptography and zero-trust transport.
- Collaborate across engineering, product, and InfoSec teams to embed security into customer features and identify, assess, and remediate vulnerabilities.
- Use AI-driven tools to automate vulnerability triage, prioritization, and preliminary investigation.
- Mentor and coach engineers and lead technical decisions across distributed teams.
Requirements
- Deep knowledge of Java internals, JVM memory management, concurrency models, and high-performance thread-safe and lock-free programming.
- Proven experience designing scalable authorization systems, including RBAC/ABAC models, token validation pipelines, permission compilation, and distributed cache invalidation.
- Strong understanding of distributed-systems security, node-to-node mutual trust, zero-trust transport, partition tolerance, and cluster-state propagation.
- Deep knowledge of OAuth 2.0 and SAML edge identity protocols.
- Proven ability to use AI to accelerate development, debug complex systems, and optimize code while owning final outcomes.
- Ability to collaborate across functions, work autonomously, drive decisions, and lead distributed teams through asynchronous communication.
- Preferred knowledge of cipher suites, TLS handshakes, PKI and certificate lifecycle management, cryptographic performance considerations, and post-quantum cryptography.
- Preferred experience mapping engine-level technical controls to FedRAMP Moderate/High, FIPS 140, and SOC 2 requirements.
- Preferred hands-on experience with data-store or search-engine internals.
Benefits
- Competitive pay based on the work performed, without reliance on previous salary.
- Health coverage for employees and families in many locations.
- Flexible locations and schedules for many roles at this distributed company.
- Generous vacation days.
- Donation matching up to $2,000 or local currency equivalent.
- Up to 40 hours annually for volunteer projects.
- At least 16 weeks of parental leave.
About Elastic
Elastic builds the Elasticsearch-based platform for enterprise search, observability (logging, metrics, APM), and security (SIEM/endpoint). It sells subscriptions and Elastic Cloud managed services with usage-based pricing, combining open source and proprietary features through Elasticsearch and Kibana. Founded in 2012 and headquartered in San Francisco, Elastic is publicly traded on the NYSE and is used by more than half of the Fortune 500.