What You'll Be Doing

• Handle customer security requests such as RFPs, RFIs, security questionnaires, and due diligence; route inquiries to appropriate teams.
• Own the Trust Center: maintain accurate, up-to-date security documentation, certifications, policies, and customer materials.
• Analyze customer inquiries to identify recurring questions and update Trust Center content accordingly.
• Triage internal request queues including product security and CVE-related tickets.
• Design and build AI-assisted workflows, automation, and process improvements focused on customer-centricity and scalability.
• Explain Elastic’s security posture and compliance (e.g., SOC 2, ISO 27001, FedRAMP, CSA STAR) clearly to customers and internal teams.
• Provide security policy guidance to employees, collaborators, and partners.
• Balance routine operational tasks with project and creative work.
• Learn Elastic’s technical environment, products, business processes, and culture to enhance your work.

Requirements

• Experience in security GRC, customer trust, security assurance, or similar functions including responding to security questionnaires and due diligence requests.
• Working knowledge of security domains and frameworks such as ISO 27001, SOC 2, NIST, GDPR, and ability to discuss technical topics with engineers and experts.
• Automation-first mindset and comfort using AI tools in daily work.
• Familiarity with vulnerability management concepts such as CVEs and severity scoring, or willingness to learn quickly.
• Excellent written and spoken English with the ability to create clear, customer-ready technical content.
• Strong attention to detail, data-driven approach, and ability to manage deadlines and shifting priorities.
• Experience working with fast-paced engineering and product teams; ability to quickly learn new technologies.
• Comfortable working with ambiguity and change.

Nice to Haves

• Proven track record of process improvement through automation, including smart use of AI (prompts, workflows, API integrations).
• Experience building custom agents and tools; Python scripting is a plus but not required.
• Certifications such as CISA, CISM, or GIAC.
• Experience working with government or other regulated customers.
• Experience with the Elastic Stack.

Perks and Benefits

• Competitive pay based on role and work rather than previous salary.
• Health coverage for employees and their families in many locations.
• Flexible work schedules and locations for many roles.
• Generous vacation allowance each year.
• Company matches up to $2000 (or local equivalent) annually for financial donations and volunteer service.
• Up to 40 hours per year dedicated to volunteer projects.
• Minimum of 16 weeks of parental leave to support parenthood.
• Inclusive, diverse, and accessible work culture that values different perspectives and backgrounds.