Senior Java Security Engineer for Elasticsearch

VulnU; United Kingdom; Remote; GBP 57,000 - 90,000; Full time

Benefits offered by this job

16 weeks parental leave

Retirement match

Health coverage for you and family

Generous vacation days

Volunteer hours

Flexible locations and schedules

Job summary

Elastic is seeking a Senior Software Developer to join the Elasticsearch Security team. You will contribute to core security initiatives, architect and implement high‑performance security features, and ensure robust data isolation in a distributed environment.

You will design for authentication, authorization, and tenant isolation, leveraging cryptography and modern identity protocols such as OAuth 2.0 and SAML, while collaborating with cross-functional teams to embed security from the outset.

Qualifications

• Expertise in Java internals and JVM memory management.
• Experience building scalable authorization systems.
• Strong understanding of distributed systems security and zero-trust concepts.

Responsibilities

• Contribute to core security initiatives from architecture to production for Elasticsearch core features.
• Design and implement high-performance security components and features.
• Collaborate across teams to integrate security into new customer features from the outset.
• Lead vulnerability management alongside InfoSec to identify and remediate risks.

Skills

Java internals

JVM memory management

Concurrency models

Authorization systems

OAuth 2.0

SAML

Distributed systems security

AI for development

Code optimization

Job description

Elastic is seeking a Senior Software Developer to join the Elasticsearch Security team. You will contribute to core security initiatives, architect and implement high‑performance security features, and ensure robust data isolation in a distributed environment.

You will design for authentication, authorization, and tenant isolation, leveraging cryptography and modern identity protocols such as OAuth 2.0 and SAML, while collaborating with cross-functional teams to embed security from the outset.