11 days ago
Toronto, CanadaSenior
Responsibilities
- Contribute to the architecture, design, planning, and production delivery of critical Elasticsearch security features.
- Develop foundational security models for authentication, authorization, identity management, cryptography, and tenant or data isolation.
- Optimize security performance for high-concurrency distributed systems and shared infrastructure.
- Apply cryptographic solutions and support security for node-to-node communication, zero-trust transport, and cluster state propagation.
- Collaborate across engineering, product, and InfoSec teams to embed security into customer features and identify, assess, and remediate vulnerabilities.
- Use AI-driven tools to automate vulnerability triage, prioritization, and preliminary investigation.
Requirements
- Deep knowledge of Java internals, JVM memory management, concurrency models, and high-performance thread-safe or lock-free programming.
- Experience building scalable authorization systems, including access models, credential or token validation, and consistent distributed authorization decisions.
- Strong understanding of distributed systems security, including mutual trust, zero-trust transport, partition tolerance, and cluster state propagation.
- Deep knowledge of edge identity protocols including OAuth 2.0 and SAML.
- Demonstrated use of AI to accelerate development, debug complex systems, and optimize code.
- Ability to collaborate across functions, transition between projects and codebases, and work autonomously in a distributed team.
- Bonus: knowledge of cipher suites, TLS handshakes, PKI and certificate lifecycle management, cryptographic performance, post-quantum cryptography, FedRAMP Moderate/High, FIPS 140, SOC 2, and data store or search engine internals.
Benefits
- CAD $128,300–$203,000 base salary with no variable compensation component.
- Eligibility to participate in Elastic’s stock program and a company-matched RRSP with dollar-for-dollar matching up to 6% of eligible earnings.
- Distributed work environment with flexible locations and schedules for many roles.
- Health coverage, generous vacation, at least 16 weeks of parental leave, up to 40 volunteer hours annually, and donation matching up to $2,000 or local equivalent.
About Elastic
Elastic builds the Elasticsearch-based platform for enterprise search, observability (logging, metrics, APM), and security (SIEM/endpoint). It sells subscriptions and Elastic Cloud managed services with usage-based pricing, combining open source and proprietary features through Elasticsearch and Kibana. Founded in 2012 and headquartered in San Francisco, Elastic is publicly traded on the NYSE and is used by more than half of the Fortune 500.