7 days ago
Israel (city not specified)Senior
Responsibilities
- Contribute to architecture, design, planning, and execution of major security components in the Elasticsearch core engine.
- Develop foundational authentication, authorization, identity, cryptography, and data-isolation models.
- Optimize security performance for high-concurrency distributed systems and large permission sets.
- Apply cryptographic solutions and support TLS, PKI, certificate lifecycle, and post-quantum cryptography initiatives.
- Collaborate across engineering, product, and InfoSec teams to embed security into customer features and remediate vulnerabilities.
- Use AI-driven tools for vulnerability triage, prioritization, preliminary investigation, development, debugging, and code optimization.
Requirements
- Deep knowledge of Java internals, JVM memory management, concurrency models, high-performance code, thread safety, and lock-free programming.
- Experience building scalable, performant authorization systems, including access models, credential and token validation, and consistent distributed authorization decisions.
- Strong understanding of distributed-systems security, mutual trust, zero-trust transport, partition tolerance, and cluster-state propagation.
- Deep knowledge of OAuth 2.0 and SAML identity protocols.
- Ability to work autonomously and collaborate across teams, projects, codebases, and distributed work environments.
- Preferred experience with cipher suites, TLS handshakes, PKI and certificate lifecycle management, cryptographic performance, post-quantum cryptography, FedRAMP, FIPS 140, SOC 2, and data-store or search-engine internals.
Benefits
- Distributed work environment with flexible locations and schedules for many roles.
- Health coverage for employees and families in many locations.
- Generous vacation allowance and at least 16 weeks of parental leave.
- Elastic matches up to $2,000, or local equivalent, for financial donations and service.
- Up to 40 hours annually for volunteer projects.
- Benefits and policies vary by region, with an emphasis on parity across locations.
About Elastic
Elastic builds the Elasticsearch-based platform for enterprise search, observability (logging, metrics, APM), and security (SIEM/endpoint). It sells subscriptions and Elastic Cloud managed services with usage-based pricing, combining open source and proprietary features through Elasticsearch and Kibana. Founded in 2012 and headquartered in San Francisco, Elastic is publicly traded on the NYSE and is used by more than half of the Fortune 500.