2 months ago
Toronto, CanadaStaff+
Responsibilities
- Own core security initiatives from architecture through production, delivering critical security features
- Lead technical design, planning, and execution for major security components in the Elasticsearch core engine
- Develop foundational security models for complex features
- Optimize security performance at scale in distributed-systems environments
- Apply cryptographic solutions to customer use cases
- Ensure robust data isolation in shared infrastructure serving multiple customers
- Monitor and apply security advances and best practices across authentication, identity management, cryptography, and data access management
- Collaborate with engineering and product leaders to embed security into customer features from the outset
- Drive vulnerability management with the InfoSec team by identifying, assessing, and remediating security risks
- Use AI-driven tools to automate vulnerability triage, prioritization, and preliminary investigation
- Mentor and coach engineers while fostering technical excellence and security-first development
Requirements
- Deep knowledge of Java internals, JVM memory management, concurrency models, and high-performance thread-safe and lock-free programming
- Proven experience designing scalable authorization systems, including RBAC, ABAC, token validation pipelines, permission compilation, and distributed cache invalidation
- Strong understanding of distributed-systems security, including node-to-node mutual trust, zero-trust transport, partition tolerance, and cluster-state propagation
- Deep knowledge of OAuth 2.0 and SAML identity protocols
- Track record of using AI to accelerate development, debug complex systems, and optimize code while retaining ownership of outcomes
- Ability to collaborate across functions and teams and transition between projects, codebases, or teams based on business priorities
- Ability to work autonomously, drive decisions, and lead a distributed team through asynchronous, direct, and transparent communication
- Knowledge of cipher suites, TLS handshakes, and PKI/certificate lifecycle management is a bonus
- Knowledge of cryptographic methods involving memory usage and delays is a bonus
- Familiarity with post-quantum cryptography and migration to quantum-resistant algorithms is a bonus
- Hands-on experience mapping engine-level technical controls to FedRAMP Moderate/High, FIPS 140, and SOC 2 requirements is a bonus
- Experience with data-store or search-engine internals is a bonus
Benefits
- Base salary with no variable compensation component
- Stock program eligibility
- Company-matched RRSP with dollar-for-dollar matching up to 6% of eligible earnings
- Health coverage for employees and families in many locations
- Flexible locations and schedules for many roles
- Generous vacation days
- Donation matching up to $2,000 or local currency equivalent
- Up to 40 hours annually for volunteer projects
- At least 16 weeks of parental leave
- Distributed-company work environment
About Elastic
Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale. Elastic’s solutions for search, observability, and security are built on the Elastic Search AI Platform — the development platform used by thousands of companies, including more than 50% of the Fortune 500.