InfoSec Analyst - Business Enablement

What You'll Be Doing

  • Handle customer security requests such as RFPs, RFIs, security questionnaires, and due diligence; route questions to appropriate teams.
  • Own and maintain the Trust Center, ensuring security documentation is accurate, up-to-date, and easy to navigate.
  • Analyze customer inquiries to identify recurring questions and gaps; propose updates to Trust Center materials.
  • Triage internal request queue including product security and CVE-related tickets.
  • Design and build AI-assisted workflows, automation, and process improvements focused on speed, scalability, and customer-centricity.
  • Explain Elastic’s security posture and compliance frameworks to customers and internal teams.
  • Provide security policy guidance to employees, collaborators, and partners.
  • Balance operational tasks with project and creative work.
  • Learn Elastic’s technical environment, products, business processes, and culture to inform your work.

Requirements

  • Experience in security GRC, customer trust, or security assurance, including handling security questionnaires, RFPs, or due diligence requests.
  • Working knowledge of security domains and frameworks such as ISO 27001, SOC 2, NIST, GDPR with ability to discuss technical topics with engineers.
  • Automation-first mindset and comfort using AI tools in daily work.
  • Familiarity with vulnerability management concepts like CVEs and severity scoring or willingness to learn quickly.
  • Excellent written and spoken English with ability to create clear, customer-ready technical content.
  • Strong attention to detail, data-driven approach, and ability to manage deadlines and shifting priorities.
  • Experience working with fast-paced engineering and product teams and ability to quickly learn new technologies.
  • Comfort with ambiguity and change.

Nice to Haves

  • Track record of improving processes through automation using AI, including crafting prompts, agentic workflows, and API integrations.
  • Experience building agents and tools; Python scripting is a plus but not required.
  • Relevant certifications such as CISA, CISM, or GIAC.
  • Experience working with government or other regulated customers.
  • Experience with the Elastic Stack.

Perks and Benefits

  • Competitive pay based on your work, not prior salary.
  • Health coverage for you and your family in many locations.
  • Flexible schedules and locations for many roles.
  • Generous vacation allowance each year.
  • Financial donation matching up to $2000 (or local currency equivalent) and up to 40 volunteer hours annually.
  • At least 16 weeks of parental leave.
  • Inclusive and diverse workplace culture welcoming all backgrounds and abilities.
AI Summary ✨

Similar jobs

  • Staff Security Engineer, Abuse Control

    StripeBarcelona, Spain6 days ago
  • Lead Security Engineer

    BufferRemote EMEA6 days ago
    Remote EMEA
  • Senior Java Engineer - Security - Elasticsearch

    ElasticSpain6 days ago
    Remote
    €67k – €106k / year base
  • See all jobs in Spain →