Principal Security Engineer - Java & Elasticsearch

Xapply; United Kingdom; On-site; GBP 120,000 - 160,000; Full time

Benefits offered by this job

Health coverage

Flexible locations

Generous vacation

Parental leave

Volunteer time

Job summary

Elastic seeks a Principal Software Developer to lead Elasticsearch security, focusing on authentication, authorization, and tenant isolation. You will shape security across the core engine and collaborate with product and engineering leadership.

You will drive scalable RBAC/ABAC models, apply cryptographic controls, and mentor engineers while advancing AI-assisted vulnerability management and secure-by-design customer features.

Qualifications

• Deep knowledge of Java internals and JVM memory management.
• Proven experience designing scalable RBAC/ABAC models and token validation pipelines.
• Solid understanding of distributed systems security, zero-trust transport, and cluster state propagation.
• Strong knowledge of OAuth 2.0 and SAML identity protocols.
• Proven track record using AI to accelerate development and debugging while owning final outcomes.
• Ability to lead across functions and projects with autonomous, transparent communication.

Responsibilities

• Own core security initiatives from architecture to production, delivering new features.
• Design and implement major security components inside Elasticsearch core engine.
• Develop foundational security models for complex features.
• Optimize security performance at scale in distributed systems.
• Apply cryptographic solutions to real customer use cases.
• Ensure data isolation in multi-tenant infrastructures.
• Monitor and apply latest security best practices across auth, identity, crypto and data access.
• Collaborate to embed security in new customer features from day one.
• Drive vulnerability management with the InfoSec team and remediate risks.
• Leverage AI tools to automate triage and investigations and reduce manual effort.
• Mentor engineers to foster a security-first development culture.

Skills

Java internals

Concurrency

Authorization design

RBAC/ABAC

Token validation

OAuth 2.0

SAML

AI in development

Cross-functional collaboration

Distributed systems

Security leadership

Job description

Elastic seeks a Principal Software Developer to lead Elasticsearch security, focusing on authentication, authorization, and tenant isolation. You will shape security across the core engine and collaborate with product and engineering leadership.

You will drive scalable RBAC/ABAC models, apply cryptographic controls, and mentor engineers while advancing AI-assisted vulnerability management and secure-by-design customer features.