7 days ago
Spain (city not specified)Senior
Responsibilities
- Design and deliver major security components within the Elasticsearch core engine from architecture through production.
- Build scalable authentication, authorization, identity-management, cryptography, and tenant-isolation capabilities.
- Optimize security performance for high-concurrency distributed systems and large permission sets.
- Apply cryptographic solutions and maintain robust data isolation across shared infrastructure.
- Collaborate with engineering, product, and InfoSec teams to embed security into features and identify, assess, and remediate vulnerabilities.
- Use AI-driven tools to automate vulnerability triage, prioritization, and preliminary investigation.
Requirements
- Deep knowledge of Java internals, JVM memory management, concurrency models, and high-performance thread-safe and lock-free programming.
- Experience building scalable authorization systems, including access models, credential or token validation, and consistent distributed authorization decisions.
- Strong understanding of distributed-systems security, mutual trust, zero-trust transport, partition tolerance, and cluster-state propagation.
- Deep knowledge of OAuth 2.0 and SAML edge identity protocols.
- Proven experience using AI to accelerate development, debugging, and code optimization.
- Ability to collaborate across functions, work across projects and codebases, and operate autonomously in a distributed team.
- Preferred experience with cipher suites, TLS handshakes, PKI and certificate lifecycle management, post-quantum cryptography, FedRAMP, FIPS 140, SOC 2, and data-store or search-engine internals.
Benefits
- Base salary with no variable compensation component.
- Health coverage for employees and families in many locations.
- Distributed work with flexible locations and schedules for many roles.
- Generous vacation allowance.
- Employer matching of up to $2,000 or local-currency equivalent for financial donations and service.
- Up to 40 volunteer hours per year.
- At least 16 weeks of parental leave.
About Elastic
Elastic builds the Elasticsearch-based platform for enterprise search, observability (logging, metrics, APM), and security (SIEM/endpoint). It sells subscriptions and Elastic Cloud managed services with usage-based pricing, combining open source and proprietary features through Elasticsearch and Kibana. Founded in 2012 and headquartered in San Francisco, Elastic is publicly traded on the NYSE and is used by more than half of the Fortune 500.