InfoSec Analyst - Business Enablement

Elastic; Portugal; Hybrid; EUR 39,000 - 61,000; Full time

Benefits offered by this job

Competitive pay

Health coverage for you and family

Flexible locations and schedules

Generous vacation days

Volunteer time (up to 40 hours/year)

Parental leave (16+ weeks)

Donation match up to $2000

Disability accommodations

Job summary

Elastic is hiring an InfoSec Analyst to join the Business Enablement team within Information Security. You will help manage security requests, maintain the Trust Center, and collaborate with Sales, Solution Architects, Support, Legal and Engineering to protect customer trust.

In this role, you will design AI-assisted workflows and automate security processes to scale operations, while ensuring clear communication of Elastic's security posture to customers and internal teams.

Qualifications

• Experience in security GRC, customer trust or security assurance.
• Knowledge of ISO 27001, SOC 2, NIST, GDPR.
• Automation-first mindset and use of AI tools.
• Excellent written and spoken English.
• Attention to detail with a data-driven approach.

Responsibilities

• Handle customer security requests (RFPs, RFIs, due diligence).
• Own Trust Center content and security documentation for customers.
• Analyze inquiries to spot recurring questions and gaps; propose updates.
• Triage internal security tickets and CVE-related requests.
• Design AI-assisted workflows to improve speed and scalability.
• Explain Elastic's security posture to customers and internal teams.
• Provide security policy guidance to employees and partners.
• Balance day-to-day ops with project work.

Skills

Security GRC

Customer trust

Automation mindset

Vulnerability management

English proficiency

Attention to detail

Fast-paced teams

Adaptability

Tools

Python scripting

Job description

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale - unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data - securing and protecting private information more effectively - Elastic's complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI.

What is The Role:

We're hiring an InfoSec Analyst to join the Business Enablement team within Information Security (InfoSec). InfoSec manages the security strategy, policy, and programs for the entire company. This includes risk management, compliance, security controls, threat prevention and detection, and incident response.

All of this work occurs in a globally distributed company. In this role you'll help Elastic win and keep customer trust, and you'll support the security requests and vulnerability work that come through the team’s queues. You'll work closely with Sales, one of your biggest partners, along with Solution Architects, Support, Legal, Engineering and other InfoSec teams, using AI and automation to do this work faster and with a focus on what customers actually need.

What You Will Be Doing:

• Handle customer security requests such as RFPs, RFIs, security questionnaires and due diligence, and route questions that need other teams' expertise to the right owners.
• Own our Trust Center. Ensure the content and security documentation for customers are accurate and up-to-date. Make it easy to navigate. This includes certifications, attestations, policies, and other customer materials.
• Analyze incoming customer inquiries to spot recurring questions and gaps, and turn them into proposed updates to the Trust Center and customer artifacts.
• Triage the team's internal request queue, including product security-related tickets and CVE-related requests.
• Design and build AI-assisted workflows, automation and process improvements that make the team faster and more scalable, with a focus on customer-centricity and self-service.
• Explain Elastic's security posture and compliance (e.g., SOC 2, ISO 27001, FedRAMP, CSA STAR) in clear terms to customers and internal teams.
• Provide security policy guidance to employees, collaborators and partners.
• Balance day-to-day operational work with project and creative work.
• Learn Elastic's technical environment, products, business processes and culture, and bring that understanding into your work.

What You Bring:

• Experience in security GRC, customer trust, security assurance or a similar function, including answering security questionnaires, RFPs or due diligence requests.
• Working knowledge of security domains and frameworks (e.g., ISO 27001, SOC 2, NIST, GDPR) and the ability to discuss technical topics with engineers and domain experts.
• An automation-first mindset, and comfort using AI tools in your day-to-day work.
• Familiarity with vulnerability management concepts such as CVEs and severity scoring, or the willingness to learn them quickly.
• Excellent written and spoken English, with the ability to turn technical detail into clear, accurate, customer-ready content.
• Strong attention to detail, a data-driven approach, and comfort with deadlines and shifting priorities.
• Experience working with fast-paced engineering and product teams, and the ability to pick up new technologies quickly.
• Comfort with ambiguity and change.

Bonus Points:

• A track record of improving processes through automation, including using AI in smart, practical ways: well-crafted prompts, agentic workflows, API integrations.
• Building your own agents and tools (Python scripting is welcome, but not required).
• Certifications such as CISA, CISM or GIAC.
• Experience with government or other regulated customers.
• Experience with the Elastic Stack.

Additional Information - We Take Care of Our People:

As a distributed company, diversity drives our identity. Whether you're looking to launch a new career or grow an existing one, Elastic is the type of company where you can balance great work with great life. Your age is only a number. It doesn't matter if you're just out of college or your children are; we need you for what you can do.

We strive to have parity of benefits across regions, and while regulations differ from place to place, we believe taking care of our people is the right thing to do.

• Competitive pay based on the work you do here and not your previous salary
• Health coverage for you and your family in many locations
• Ability to craft your calendar with flexible locations and schedules for many roles
• Generous number of vacation days each year
• Increase your impact - We match up to $2000 (or local currency equivalent) for financial donations and service
• Up to 40 hours each year to use toward volunteer projects you love
• Embracing parenthood with a minimum of 16 weeks of parental leave

Security & Privacy Responsibilities: Take ownership of protecting the confidentiality, integrity, and availability of organizational data and systems by following applicable privacy and security policies, standards, and procedures. Ensure that all individual contributions follow Elastic's Secure Software Development Framework (SSDF). Proactively participate in mandatory role-based training to ensure personal technical execution consistently aligns with the highest standards of data protection, data privacy, and system resilience.

Different people approach problems differently. We need that. Elastic is an equal opportunity employer and is committed to creating an inclusive culture that celebrates different perspectives, experiences, and backgrounds. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, pregnancy, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, disability status, or any other basis protected by federal, state or local law, ordinance or regulation.

We welcome individuals with disabilities and strive to create an accessible and inclusive experience for all individuals. To request an accommodation during the application or the recruiting process, please email [e-mail]. We will reply to your request within 24 business hours of submission.

Applicants have rights under Federal Employment Laws and can view the following posters linked below:

Family and Medical Leave Act (FMLA) Poster

Employee Polygraph Protection Act (EPPA) Poster

Please see here for our Privacy Statement.

Compensation for this role is in the form of base salary. This role does not have a variable compensation component.

At Elastic, our compensation philosophy aims to provide fair, competitive and transparent remuneration. Salary ranges are established based on a combination of external market benchmarks, internal pay equity considerations, and the responsibilities and complexity associated with each role. This approach helps ensure consistency across comparable roles while remaining competitive within the relevant labour markets.

The typical starting salary range for this role is:

€38.700-€61.300 EUR