2 months ago
Spain (city not specified)Senior
Responsibilities
- Build and maintain ingestion of security telemetry from cloud provider audit logs, identity and SaaS activity, endpoint data, and asset data into Elasticsearch.
- Integrate third-party and cloud provider APIs, including authentication, pagination, rate-limit handling, concurrency, and schema changes.
- Operate, monitor, upgrade, and manage capacity for Elastic Cloud on Kubernetes clusters, including shards, index lifecycle management, and cross-cluster search.
- Use Terraform to manage cloud infrastructure and Elasticsearch resources such as pipelines, index templates, and alerts.
- Use Kubernetes and Helm to deploy scheduled ingestion jobs and develop automation such as self-healing jobs, health checks, internal CLIs, and agent-assisted workflows.
- Own data quality and reliability by monitoring data flow, backfills, schema consistency, field consistency, and costs.
Requirements
- Production experience operating Elastic and Elasticsearch, including ingest pipelines, index templates, mappings, queries, cluster health, and upgrades.
- Strongly preferred experience with ECK or Elasticsearch on Kubernetes.
- Experience using AI to accelerate development, debug complex systems, and improve operations while retaining ownership of outcomes.
- Experience deploying and operating Kubernetes workloads, scheduled jobs, Helm charts, and operators, including troubleshooting pods and jobs.
- Experience managing cloud and Elasticsearch resources with Terraform.
- Experience consuming REST APIs for data ingestion, including authentication, pagination, rate limiting, concurrency, and error handling.
- Ability to read, write, and modify Python ingestion and automation scripts.
- Eligibility to work in Department of Defense Impact Level 4 or above cloud service environments.
- Cloud provider experience, preferably GCP and audit or logging data, is a bonus.
- Knowledge of GitHub, pull-request workflows, GitHub Actions, continuous integration, SOC operations, incident response workflows, and dashboard or visualization tools is preferred.
Benefits
- Competitive base pay with no variable compensation component.
- Health coverage for employees and families in many locations.
- Flexible locations and schedules for many roles at this distributed company.
- Generous vacation allowance.
- Elastic matches up to $2000, or local currency equivalent, for financial donations and provides up to 40 volunteer hours annually.
- At least 16 weeks of parental leave.
Tech Stack
About Elastic
Elastic builds the Elasticsearch-based platform for enterprise search, observability (logging, metrics, APM), and security (SIEM/endpoint). It sells subscriptions and Elastic Cloud managed services with usage-based pricing, combining open source and proprietary features through Elasticsearch and Kibana. Founded in 2012 and headquartered in San Francisco, Elastic is publicly traded on the NYSE and is used by more than half of the Fortune 500.