2 months ago
United Kingdom (city not specified)Senior
Responsibilities
- Build and maintain ingestion of security telemetry into Elasticsearch from cloud provider audit logs, identity and SaaS activity, endpoint data, and asset data.
- Integrate third-party and cloud provider APIs while handling authentication, pagination, rate limits, concurrency, errors, and schema changes.
- Operate, monitor, upgrade, and manage capacity and shards for Elastic Cloud on Kubernetes clusters.
- Manage index lifecycle management, cross-cluster search, ingest pipelines, index templates, mappings, queries, and alerts.
- Use Terraform to manage cloud infrastructure and Elasticsearch resources.
- Deploy scheduled ingestion jobs using Kubernetes and Helm.
- Develop self-healing jobs, health checks, alerting, internal CLIs, and AI- or agent-assisted investigation and operations workflows.
- Monitor data quality, backfills, schema and field consistency, reliability, and infrastructure costs.
Requirements
- Production experience operating Elastic or Elasticsearch, including ingest pipelines, index templates, mappings, queries, cluster health, and upgrades.
- Strongly preferred experience with ECK or Elasticsearch on Kubernetes.
- Experience using AI to accelerate development, debug complex systems, and improve operations while retaining ownership of outcomes.
- Experience deploying and operating Kubernetes workloads, scheduled jobs, Helm charts, and operators, including troubleshooting pods and jobs.
- Experience managing cloud and Elasticsearch resources with Terraform.
- Ability to consume REST APIs for ingestion, including authentication, pagination, rate limiting, concurrency, and error handling.
- Python scripting ability for reading, writing, and modifying ingestion and automation scripts.
- Eligibility to work in Department of Defense Impact Level 4 or above cloud service environments.
- Bonus: experience with cloud providers, especially GCP and audit or logging data.
- Bonus: knowledge of GitHub, pull-request workflows, GitHub Actions, and continuous integration.
- Bonus: knowledge of SOC operations and incident response workflows involving security telemetry.
- Bonus: ability to develop and use dashboard or visualization tools.
Benefits
- Distributed-company work environment with flexible locations and schedules for many roles.
- Health coverage for employees and families in many locations.
- Generous vacation allowance.
- Elastic matches up to $2,000, or local currency equivalent, for financial donations and service.
- Up to 40 hours per year for volunteer projects.
- At least 16 weeks of parental leave.
Tech Stack
About Elastic
Elastic builds the Elasticsearch-based platform for enterprise search, observability (logging, metrics, APM), and security (SIEM/endpoint). It sells subscriptions and Elastic Cloud managed services with usage-based pricing, combining open source and proprietary features through Elasticsearch and Kibana. Founded in 2012 and headquartered in San Francisco, Elastic is publicly traded on the NYSE and is used by more than half of the Fortune 500.