Senior Information Security Infrastructure Engineer - Security Architecture - InfoSec

Elastic is the Search AI Company providing cloud-based solutions for search, security, and observability, used by over 50% of the Fortune 500. The role is within the InfoSec - Security Architecture team, focusing on protecting organizational data and systems through security telemetry ingestion and cluster management.

• Experience operating Elastic and Elasticsearch in production, including managing ingest pipelines, index templates, mappings, and queries.
• Strong preference for experience with ECK or Elasticsearch on Kubernetes.
• Proven use of AI to accelerate development, debugging, and operations.
• Expertise in deploying and operating workloads on Kubernetes including scheduled jobs, Helm charts, and troubleshooting.
• Proficiency with Terraform for managing cloud and Elasticsearch resources as code.
• Experience consuming REST APIs for data ingestion, handling authentication, pagination, rate limits, concurrency, and error handling.
• Python scripting skills for reading, writing, and modifying ingestion and automation scripts.
• Eligibility to work in Department of Defense (DoD) Impact Level 4 or above cloud service environments.

Nice to have:

• Experience with cloud providers, preferably GCP, and working with audit and logging data.
• Knowledge of GitHub, PR-based workflows, GitHub Actions, and Continuous Integration (CI).
• Understanding of SOC operations and incident response workflows using security telemetry.
• Ability to develop and use dashboard and visualization tools.

• Build and maintain ingestion of security-relevant data into Elasticsearch, integrating with third-party and cloud provider APIs.
• Maintain Elastic Cloud on Kubernetes clusters, including monitoring, upgrading versions, managing capacity, shards, and index lifecycle management.
• Use Terraform to manage cloud infrastructure and Elasticsearch resources including pipelines, index templates, and alerts.
• Deploy scheduled ingest jobs using Kubernetes and Helm.
• Implement AI automation and tooling for self-healing jobs, health checks, alerting, internal CLIs, and AI-assisted investigation workflows.
• Monitor data quality and reliability, ensuring correct data flow, consistent schemas, and cost management.

Eligibility to work in Department of Defense (DoD) Impact Level 4 or above cloud service environments is required. Employment is subject to export control laws regarding nationals or residents of certain sanctioned countries including Belarus, Cuba, Iran, North Korea, Syria, Russia, and certain Ukrainian territories. Elastic is an equal opportunity employer committed to inclusivity and diversity.