Senior Java Security Engineer for Elasticsearch

Referral Board; United States; On-site; USD 133,000 - 211,000; Full time

Benefits offered by this job

Stock program

401k with dollar-for-dollar matching

Generous vacation days

Job summary

Elastic in the United States is seeking a Senior Software Engineer to join the Elasticsearch Security team. You will contribute to the architecture and design of authentication, authorization, and tenant isolation, delivering high-performance security at scale.

You will work with engineering and product leaders to embed security into new features from the outset, tackle vulnerability management with the InfoSec team, and explore AI-assisted tooling to streamline security workflows.

Qualifications

• Deep knowledge of Java internals and JVM memory management.
• Experience building scalable authorization systems under high concurrency.
• Understanding distributed systems security incl. node-to-node trust and zero-trust transport.
• Knowledge of OAuth 2.0 and SAML.
• Proven track record using AI to accelerate development.

Responsibilities

• Architect and deliver security features in Elasticsearch core from design to production.
• Develop foundational security models for features.
• Optimize security performance at scale in distributed systems.
• Apply cryptographic solutions for real customer use cases.
• Ensure data isolation within shared infrastructure for multiple tenants.
• Monitor and adopt latest security practices including auth, identity, crypto, access control.
• Collaborate across teams to bake security into new customer features.
• Drive vulnerability management with the InfoSec team.
• Leverage AI-driven tools to automate vulnerability triage and investigation.

Skills

Java internals

JVM memory mgmt

Concurrency models

Authorization design

Distributed security

OAuth 2.0

SAML

AI tooling

Cross-functional collab

Autonomy

Job description

Elastic in the United States is seeking a Senior Software Engineer to join the Elasticsearch Security team. You will contribute to the architecture and design of authentication, authorization, and tenant isolation, delivering high-performance security at scale.

You will work with engineering and product leaders to embed security into new features from the outset, tackle vulnerability management with the InfoSec team, and explore AI-assisted tooling to streamline security workflows.