Principal Java Security Architect, Elasticsearch Core

VulnU; United Kingdom; Remote; GBP 120,000 - 180,000; Full time

Benefits offered by this job

16 weeks parental leave

Retirement match

Job summary

Elastic in the United Kingdom is seeking a Principal Software Engineer (Java) to lead the Elasticsearch Security team's architecture and feature design. You will own major security components, drive cryptographic solutions, and ensure robust data isolation across a distributed data store.

You will mentor engineers, collaborate with product and RT teams, and push for security-first development while leveraging AI tools to streamline vulnerability workflows.

Qualifications

• Proven experience designing and implementing scalable security in distributed systems.
• Expertise in Java performance, memory management, and thread safety.
• Strong knowledge of RBAC/ABAC models and token validation pipelines.
• Experience with OAuth 2.0 and SAML identity protocols.

Responsibilities

• Own core security initiatives from architecture to production.
• Lead the technical design for major security components inside the Elasticsearch core engine.
• Develop foundational security models for intricate features.
• Optimize security performance at scale in distributed systems environments.
• Apply cryptographic solutions to address real customer use cases.
• Ensure robust data isolation within shared infrastructure for multi-tenant environments.
• Monitor and apply latest security practices across authentication, identity, cryptography, and access control.
• Collaborate across teams to embed security into new features from the start.
• Drive vulnerability management with the InfoSec team and remediation actions.
• Leverage AI-driven tools to automate vulnerability triage and investigation, reducing manual effort.
• Mentor and coach engineers to foster security-first development.

Skills

Java internals

JVM memory management

Concurrency models

RBAC/ABAC design

OAuth 2.0

SAML

Security architecture

Distributed systems security

Job description

Elastic in the United Kingdom is seeking a Principal Software Engineer (Java) to lead the Elasticsearch Security team's architecture and feature design. You will own major security components, drive cryptographic solutions, and ensure robust data isolation across a distributed data store.

You will mentor engineers, collaborate with product and RT teams, and push for security-first development while leveraging AI tools to streamline vulnerability workflows.