What You'll Be Doing

• Contributing to core security initiatives from architecture to production, focusing on new critical features.
• Participating in technical design, planning, and execution for major security components inside the Elasticsearch core engine.
• Developing foundational security models for features.
• Optimizing security performance at scale in distributed systems environments.
• Applying cryptographic solutions to real customer use cases.
• Ensuring robust data isolation within shared infrastructure for disparate customers.
• Monitoring and applying the latest advancements in security, including authentication, identity management, cryptography, and data access management.
• Collaborating with peers to embed security into new customer features from the outset.
• Driving vulnerability management efforts with the InfoSec team to identify, assess, and remediate risks.
• Leveraging AI-driven tools to automate vulnerability triage, prioritization, and investigation, streamlining security workflows.

Requirements

• Deep knowledge of Java internals and JVM memory management.
• Understanding of concurrency models and ability to write high-performance, thread-safe, lock-free code.
• Experience with large open-source and enterprise codebases.
• Experience building scalable, performant authorization systems under high concurrency and large permission sets.
• Solid comprehension of distributed systems security, including mutual trust, zero-trust transport, partition tolerance, and cluster state propagation.
• Deep knowledge of edge identity protocols such as OAuth 2.0 and SAML.
• Proven track record of using AI to accelerate development, debug complex systems, and optimize code.
• Strong collaboration skills across functions and teams, with adaptability to changing priorities.
• Ability to work autonomously and support decisions and results through asynchronous and transparent communication.

Nice to Haves

• Knowledge of cipher suites, TLS handshakes, and PKI/certificate lifecycle management.
• Experience with cryptographic methods that consider memory usage and latencies.
• Familiarity with Post-Quantum Cryptography (PQC) and migration to quantum-resistant algorithms.
• Hands-on experience mapping technical controls to FedRAMP (Moderate/High), FIPS 140, and SOC 2 requirements.
• Experience working on internals of a data store or search engine.

Perks and Benefits

• Competitive pay based on work performed, not previous salary.
• Health coverage for employees and their families in many locations.
• Flexible locations and schedules for many roles to craft your own calendar.
• Generous vacation days each year.
• Financial donation matching up to $2000 (or local equivalent) and up to 40 volunteer hours yearly.
• At least 16 weeks of parental leave to support parenthood.
• Commitment to diversity, inclusion, and equal opportunity in the workplace.
• Support for individuals with disabilities and accommodations during recruiting processes.