Senior Software Engineer - Security - Elasticsearch

The available sources do not contain information about the company name for rounx.com.; United States; On-site; USD 133,000 - 211,000; Full time

Job summary

Elastic is seeking a Senior Software Engineer for the Elasticsearch Security team to design and implement core security features, including authentication, authorization, and tenant isolation, while ensuring high-performance security at scale.

The role involves collaborating with engineering and product leaders, as well as the InfoSec team, to manage vulnerabilities and leverage AI-driven tools to streamline security workflows and build scalable security solutions.

Qualifications

• Deep knowledge of Java internals, JVM memory management, and concurrency models.
• Experience building scalable authorization systems.
• Understanding distributed systems security, edge identity protocols like OAuth 2.0 and SAML.
• Experience using AI to enhance development and optimization.
• Bonus: cryptographic methods, TLS handshakes, PKI, FedRAMP, FIPS 140, SOC 2

Responsibilities

• Design and implement core security features within the Elasticsearch Security team.
• Develop foundational security models and optimize performance in distributed systems.
• Apply cryptographic solutions and embed security into new customer features.
• Collaborate with engineering, product leaders, and the InfoSec team for vulnerability management and security workflows using AI-driven tools.

Skills

Java internals

JVM memory management

Concurrency models

Distributed systems security

OAuth 2.0

SAML

AI for security

Security architecture

Job description

Elastic is seeking a Senior Software Engineer to join the Elasticsearch Security team. The role involves contributing to the architecture and design of core security features, including authentication, authorization, and tenant isolation, while ensuring high-performance security at scale. Responsibilities include developing foundational security models, optimizing performance in distributed systems, applying cryptographic solutions, and embedding security into new customer features. Collaboration with engineering and product leaders, as well as the InfoSec team, is essential for vulnerability management and leveraging AI-driven tools to streamline security workflows.

The ideal candidate has deep knowledge of Java internals, JVM memory management, and concurrency models, along with experience building scalable authorization systems. A solid understanding of distributed systems security, edge identity protocols like OAuth 2.0 and SAML, and a proven track record of using AI to enhance development and optimization are required. Bonus qualifications include expertise in cryptographic methods, TLS handshakes, PKI, and familiarity with FedRAMP, FIPS 140, and SOC 2 requirements. The role offers a base salary ranging from $133,100 to $210,600 USD, with higher ranges in select locations.