What You'll Be Doing

• Contributing to core security initiatives from architecture to production, focusing on new critical features in Elasticsearch core engine.
• Developing foundational security models for features.
• Optimizing security performance at scale in distributed systems.
• Applying cryptographic solutions for customer use cases.
• Ensuring robust data isolation within shared infrastructure for different customers.
• Monitoring and applying latest advancements and best practices in security including authentication, identity management, cryptography, and data access management.
• Collaborating across teams to embed security into new features from the start.
• Driving vulnerability management by working closely with InfoSec to identify, assess, and remediate risks.
• Leveraging AI-driven tools to automate vulnerability triage, prioritization, and investigation to streamline security workflows.

Requirements

• Deep knowledge of Java internals and JVM memory management; experience with concurrency, high-performance, thread-safe, and lock-free code.
• Experience building scalable authorization systems with large permission sets and consistency across distributed systems.
• Solid understanding of distributed systems security, including mutual trust, zero-trust transport, partition tolerance, and cluster state propagation.
• Deep knowledge of edge identity protocols such as OAuth 2.0 and SAML.
• Proven track record using AI for development acceleration, debugging complex systems, and code optimization.
• Ability to collaborate across teams, transition seamlessly between projects, codebases or teams according to priorities.
• Ability to work autonomously in a distributed team using asynchronous, direct, and transparent communication.

Nice to Haves

• Knowledge of cipher suites, TLS handshakes, and PKI/certificate lifecycle management.
• Understanding of cryptographic methods with considerations for memory usage and delays.
• Familiarity with Post-Quantum Cryptography (PQC) and migration to quantum-resistant algorithms.
• Experience mapping technical controls to FedRAMP (Moderate/High), FIPS 140, and SOC 2 requirements.
• Experience working on data store or search engine internals.

Perks and Benefits

• Competitive pay based on your work, not previous salary.
• Health coverage for you and your family in many locations.
• Flexible locations and schedules for many roles.
• Generous vacation days annually.
• Matching up to $2000 (or local equivalent) for financial donations and service.
• Up to 40 hours yearly for volunteer projects you care about.
• Minimum of 16 weeks parental leave.
• Commitment to diversity, equity, inclusion, and equal opportunity employment.
• Accessible and inclusive experience for individuals with disabilities with accommodations available.