What You'll Be Doing

• Contribute to core security initiatives from architecture to production, delivering new critical features.
• Participate in the technical design, planning, and execution of major security components within the Elasticsearch core engine.
• Develop foundational security models for new features.
• Optimize security performance at scale in distributed systems environments.
• Apply cryptographic solutions to real customer use cases.
• Ensure robust data isolation within shared infrastructure supporting different customers.
• Monitor and implement the latest advancements and best practices in security, including authentication, identity management, cryptography, and data access management.
• Collaborate with peers company-wide to embed security into new customer features from the outset.
• Drive vulnerability management by working closely with the InfoSec team to identify, assess, and remediate security risks proactively.
• Leverage AI-driven tools to automate vulnerability triage, prioritization, and preliminary investigation, streamlining security workflows and reducing manual effort.

Requirements

• Deep knowledge of Java internals and JVM memory management with understanding of concurrency models.
• Experience writing high-performance, thread-safe, lock-free code, including working with large open-source and enterprise codebases.
• Experience building scalable, performant authorization systems under high concurrency and large permission sets.
• Solid understanding of distributed systems security concepts such as node-to-node mutual trust, zero-trust transport, partition tolerance, and cluster state propagation.
• Deep knowledge of edge identity protocols like OAuth 2.0 and SAML.
• Proven track record of using AI to accelerate development, debug complex systems, and optimize code while collaborating on outcomes.
• Strong ability to collaborate across functions and teams and transition seamlessly between projects, codebases, or teams based on priorities.
• Ability to work autonomously in a distributed team environment using asynchronous, direct, and transparent communication.

Nice to Haves

• Knowledge of cipher suites, TLS handshakes, and PKI/certificate lifecycle management.
• Experience with cryptographic methods focusing on memory usage and performance delays.
• Familiarity with Post-Quantum Cryptography (PQC) and readiness for migration to quantum-resistant algorithms.
• Hands-on experience mapping technical controls to FedRAMP (Moderate/High), FIPS 140, and SOC 2 requirements.
• Experience working on internals of a data store or search engine.

Perks and Benefits

• Competitive pay based on your work, not previous salary.
• Health coverage for employees and families in many locations.
• Flexible locations and schedules for many roles to balance work and life.
• Generous vacation days annually.
• Matching donations up to $2000 (or local currency equivalent) for financial donations and volunteer service.
• Up to 40 hours each year to volunteer on projects you care about.
• At least 16 weeks of parental leave to support parenthood.
• Commitment to diversity, equity, inclusion, and accessibility in the workplace.