2 months ago
Greece (city not specified)Senior
Responsibilities
- Build and maintain ingestion of security-relevant telemetry from cloud providers, identity and SaaS systems, endpoints, and asset sources into Elasticsearch.
- Integrate with third-party and cloud provider APIs, handling authentication, pagination, rate limits, concurrency, errors, and schema changes.
- Operate and maintain Elastic Cloud on Kubernetes clusters, including monitoring, upgrades, capacity, shards, index lifecycle management, and cross-cluster search.
- Use Terraform to manage cloud infrastructure, Elasticsearch resources, ingest pipelines, index templates, and alerts.
- Use Kubernetes and Helm to deploy and operate scheduled ingestion jobs.
- Develop automation such as self-healing jobs, health checks, alerting, internal CLIs, and AI-assisted investigation and operations workflows.
- Monitor data quality, backfills, schema and field consistency, reliability, and costs.
- Collaborate with detection, incident response, and consulting teams that query the security telemetry.
Requirements
- Experience operating Elastic and Elasticsearch in production, including ingest pipelines, index templates, mappings, queries, cluster health, and upgrades.
- Experience with Kubernetes workloads, scheduled jobs, Helm charts, operators, and troubleshooting pods and jobs.
- Experience managing cloud and Elasticsearch resources with Terraform.
- Experience consuming REST APIs for ingestion, including authentication, pagination, rate limiting, concurrency, and error handling.
- Ability to read, write, and modify Python ingestion and automation scripts.
- Proven ability to use AI to accelerate development, debug complex systems, and improve operations while owning final outcomes.
- Eligibility to work in Department of Defense Impact Level 4 or higher cloud service environments.
- Experience with Elastic Cloud on Kubernetes or Elasticsearch on Kubernetes is strongly preferred.
- Cloud provider experience, preferably GCP, and experience with audit and logging data are preferred.
- Knowledge of GitHub, pull-request workflows, GitHub Actions, continuous integration, SOC operations, incident response workflows, and dashboard or visualization tools is preferred.
Benefits
- Base salary range of €61.100—€97.000 EUR with no variable compensation component.
- Distributed work environment with flexible locations and schedules for many roles.
- Health coverage for employees and families in many locations.
- Generous vacation days and at least 16 weeks of parental leave.
- Up to $2000, or local currency equivalent, in matched financial donations.
- Up to 40 hours annually for volunteer projects.
- Inclusive equal-opportunity workplace with accessibility accommodations available.
Tech Stack
About Elastic
Elastic builds the Elasticsearch-based platform for enterprise search, observability (logging, metrics, APM), and security (SIEM/endpoint). It sells subscriptions and Elastic Cloud managed services with usage-based pricing, combining open source and proprietary features through Elasticsearch and Kibana. Founded in 2012 and headquartered in San Francisco, Elastic is publicly traded on the NYSE and is used by more than half of the Fortune 500.