Senior Java Engineer - Security - Elasticsearch

Elastic is a company specializing in Search AI Platform used by more than 50% of the Fortune 500. They provide cloud-based solutions for search, security, and observability to help organizations deliver AI capabilities securely.

• Deep knowledge of Java internals and JVM memory management, concurrency models, and writing high-performance, thread-safe, lock-free code.
• Experience building scalable and performant authorization systems under high concurrency.
• Solid comprehension of distributed systems security, including node-to-node trust, zero-trust transport, partition tolerance, and cluster state propagation.
• Deep knowledge of edge identity protocols such as OAuth 2.0 and SAML.
• Proven track record of using AI to accelerate development, debug complex systems, and optimize code.
• Ability to collaborate across functions and manage different projects, codebases, or teams.
• Ability to work autonomously and communicate effectively in distributed teams.

Nice to have:

• Knowledge of cipher suites, TLS handshakes, and PKI/certificate lifecycle management.
• Cryptographic methods optimized for memory usage and delays.
• Familiarity with Post-Quantum Cryptography (PQC).
• Experience mapping technical controls to FedRAMP, FIPS 140, and SOC 2 requirements.
• Experience working on data store or search engine internals.

• Contributing to core security initiatives from architecture to production, focusing on new critical features.
• Participating in technical design, planning, and execution for major security components inside the Elasticsearch core engine.
• Developing foundational security models for features.
• Optimizing security performance at scale in distributed systems.
• Applying cryptographic solutions to address customer use cases.
• Ensuring robust data isolation within shared infrastructure.
• Monitoring and applying advancements and best practices in security, including authentication, identity management, cryptography, and data access management.
• Collaborating with peers to embed security into new customer features from the outset.
• Driving vulnerability management efforts by working with the InfoSec team.
• Leveraging AI-driven tools to automate vulnerability triage, prioritization, and investigation.

Applicants must comply with U.S. and other countries’ export controls for nationals or residents of Belarus, Cuba, Iran, North Korea, Syria, Russia, and certain Ukrainian territories. Export licenses may be required for employment. National origin does not affect eligibility at Elastic.