Senior InfoSec Infra Engineer: Telemetry & Architecture

Referral Board; Portugal; On-site; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Health coverage

Flexible locations and schedules

Vacation days

Parental leave

Competitive pay

Job summary

Elastic is seeking a Senior Information Security Infrastructure Engineer to join the InfoSec - Security Architecture team in Portugal. You will own the data ingestion pipeline for security telemetry, ensure Elastic Cloud on Kubernetes is healthy, and collaborate across teams to protect data and systems.

The role emphasizes building secure, scalable ingestion with Terraform, Kubernetes, and AI-assisted automation while maintaining data quality and cost control.

Qualifications

• Experience operating Elastic/Elasticsearch in production environments.
• In-depth knowledge of ingest pipelines, index templates, mappings and queries.
• Experience with ECK or Elasticsearch on Kubernetes is strongly preferred.
• Familiarity with cloud infrastructure automation and security telemetry workflows.
• Ability to consume REST APIs for data ingestion including auth and pagination.

Responsibilities

• Ingest security telemetry into Elasticsearch from cloud provider logs and SaaS data.
• Maintain healthy Elastic Cloud on Kubernetes clusters and manage capacity and ILM.
• Manage pipelines, index templates, and alerts via Terraform; deploy with Kubernetes/Helm.
• Develop AI-enabled automation to reduce toil and improve monitoring/response.
• Ensure data quality, schema consistency, and cost control.

Skills

Kubernetes

Terraform

API integration

Python scripting

Elasticsearch

AI automation

DoD IL4 eligibility

GitHub

GitHub Actions

Tools

CI/CD

Job description

Elastic is seeking a Senior Information Security Infrastructure Engineer to join the InfoSec - Security Architecture team in Portugal. You will own the data ingestion pipeline for security telemetry, ensure Elastic Cloud on Kubernetes is healthy, and collaborate across teams to protect data and systems.

The role emphasizes building secure, scalable ingestion with Terraform, Kubernetes, and AI-assisted automation while maintaining data quality and cost control.