What You'll Be Doing

• Contribute to core security initiatives from architecture to production, focusing on delivering new critical features.
• Participate in technical design, planning, and execution for major security components inside the Elasticsearch core engine.
• Develop foundational security models for features.
• Optimize security performance at scale in distributed systems environments.
• Apply cryptographic solutions to address genuine customer use cases.
• Ensure robust data isolation within shared infrastructure supporting disparate customers.
• Monitor and apply the latest advancements and best practices in security fields such as authentication, identity management, cryptography, and data access management.
• Collaborate with peers across the company to embed security into new customer features from the outset.
• Drive vulnerability management efforts by working closely with the InfoSec team to identify, assess, and remediate security risks.
• Leverage AI-driven tools to automate vulnerability triage, prioritization, and preliminary investigation, streamlining security workflows.

Requirements

• Deep knowledge of Java internals and JVM memory management, including concurrency models and ability to write high-performance, thread-safe, lock-free code.
• Experience building scalable and performant authorization systems under high concurrency and large permission sets.
• Strong understanding of distributed systems security concepts such as node-to-node mutual trust, zero-trust transport, partition tolerance, and cluster state propagation.
• Deep knowledge of edge identity protocols like OAuth 2.0 and SAML.
• Proven track record of using AI to accelerate development, debug complex systems, and optimize code while collaborating on final outcomes.
• Ability to collaborate across teams and transition smoothly between projects, codebases, or teams based on business needs.
• Capable of working autonomously with transparent and asynchronous communication in a distributed team environment.

Nice to Haves

• Knowledge of cipher suites, TLS handshakes, and PKI/certificate lifecycle management.
• Experience with cryptographic methods optimizing memory usage and latency.
• Familiarity with Post-Quantum Cryptography (PQC) and supporting migration to quantum-resistant algorithms.
• Hands-on experience mapping technical controls to FedRAMP (Moderate/High), FIPS 140, and SOC 2 compliance requirements.
• Experience working on internals of a data store or search engine.

Perks and Benefits

• Competitive pay based on your work, not previous salary.
• Health coverage available for you and your family in many locations.
• Flexible schedules and locations for many roles to craft your calendar.
• Generous vacation allowance each year.
• Matching donations up to $2000 (or local currency equivalent) for financial contributions and service.
• Up to 40 hours per year to volunteer for projects you care about.
• Supportive parental leave policy with a minimum of 16 weeks.
• Commitment to diversity, inclusion, and accessibility in a distributed work environment.