2 months ago
Toronto, CanadaSenior
Responsibilities
- Contribute to the architecture, technical design, planning, execution, and production delivery of major security components in the Elasticsearch core engine.
- Develop foundational security models for new features.
- Optimize security performance at scale in distributed-systems environments.
- Apply cryptographic solutions to genuine customer use cases.
- Ensure robust data isolation within shared infrastructure serving disparate customers.
- Monitor and apply current security practices in authentication, identity management, cryptography, and data access management.
- Collaborate across the company to embed security into customer features from the outset.
- Drive vulnerability management with the InfoSec team by identifying, assessing, and remediating security risks.
- Use AI-driven tools to automate vulnerability triage, prioritization, and preliminary investigation.
Requirements
- Deep knowledge of Java internals, JVM memory management, concurrency models, and high-performance, thread-safe, lock-free programming.
- Experience building scalable and performant authorization systems for high concurrency and large permission sets, including access models, credential or token validation, and consistent distributed authorization decisions.
- Strong understanding of distributed-systems security, including node-to-node mutual trust, zero-trust transport, partition tolerance, and cluster-state propagation.
- Deep knowledge of OAuth 2.0 and SAML identity protocols.
- Proven experience using AI to accelerate development, debug complex systems, and optimize code.
- Ability to collaborate across functions and teams and work across projects, codebases, or teams as priorities change.
- Ability to work autonomously in a distributed team using asynchronous, direct, and transparent communication.
- Knowledge of cipher suites, TLS handshakes, and PKI or certificate lifecycle management is a bonus.
- Knowledge of cryptographic methods involving memory usage and delays is a bonus.
- Familiarity with post-quantum cryptography and quantum-resistant cryptographic algorithms is a bonus.
- Hands-on experience mapping engine-level technical controls to FedRAMP Moderate or High, FIPS 140, and SOC 2 requirements is a bonus.
- Experience with data-store or search-engine internals is a bonus.
Benefits
- Distributed company with flexible locations and schedules for many roles.
- Health coverage for employees and families in many locations.
- Generous vacation allowance.
- Up to $2,000 matching for financial donations and service.
- Up to 40 hours annually for volunteer projects.
- At least 16 weeks of parental leave.
- Company-matched Registered Retirement Savings Plan (RRSP) with dollar-for-dollar matching up to 6% of eligible earnings.
- Base salary role with no variable compensation component.
About Elastic
Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale. Elastic’s solutions for search, observability, and security are built on the Elastic Search AI Platform — the development platform used by thousands of companies, including more than 50% of the Fortune 500.