Senior Security Telemetry Engineer (Elasticsearch)

Elastic; Polska; On-site; PLN 308,000 - 485,000; Full time

Job summary

Elastic is seeking a Senior Information Security Infrastructure Engineer to own the end-to-end security data pipeline from new data sources into Elasticsearch. You will ensure the Elastic Cloud on Kubernetes clusters stay healthy and up-to-date, while managing ILM, cross-cluster search, and infrastructure-as-code deployments.

The role emphasizes AI-augmented tooling to reduce toil and improve incident response.

Qualifications

• Experience operating Elastic and Elasticsearch in production including ingest pipelines, index templates, mappings, and queries
• Strong background with Kubernetes, Helm, and Terraform to deploy and operate cloud-native data pipelines
• Proficient in Python scripting for ingestion/automation and REST API integration
• Experience with AI-assisted tooling to accelerate development and incident response
• Eligibility to work in DoD Impact Level 4 or higher cloud environments

Responsibilities

• Ingest security telemetry into Elasticsearch from cloud provider audits, identity/SaaS activity, and endpoint data
• Maintain and upgrade Elastic Cloud on Kubernetes clusters, monitor versions and builds
• Manage capacity, shards, ILM, and cross-cluster search; manage pipelines and alerts via Terraform
• Deploy scheduled ingest jobs with Kubernetes/Helm; build self-healing jobs and health checks
• Oversee data quality, backfills, and schema consistency while controlling costs

Job description

Elastic is seeking a Senior Information Security Infrastructure Engineer to own the end-to-end security data pipeline from new data sources into Elasticsearch. You will ensure the Elastic Cloud on Kubernetes clusters stay healthy and up-to-date, while managing ILM, cross-cluster search, and infrastructure-as-code deployments.

The role emphasizes AI-augmented tooling to reduce toil and improve incident response.