New

InfoSec Analyst - Business Enablement

Brak informacji o wynagrodzeniu

Nieokreślone0Full-time

#478338·Dodano wczoraj·1

Źródło: Elastic

Aplikuj teraz

Tech Stack / Keywords

ISO 27001SOC 2NISTGDPRCVEAIPythonCISAElastic StackAPI

Podsumowanie oferty

Elastic is hiring an InfoSec Analyst for the Business Enablement team to handle customer security requests, vulnerability-related work, and the Trust Center. The role also involves building AI-assisted workflows and automation to improve these processes.

Wymagania

Experience in security GRC, customer trust, security assurance, or a similar function, including answering security questionnaires, RFPs, or due diligence requests.
Working knowledge of security domains and frameworks such as ISO 27001, SOC 2, NIST, and GDPR, and ability to discuss technical topics with engineers and domain experts.
An automation-first mindset and comfort using AI tools in day-to-day work.
Familiarity with vulnerability management concepts such as CVEs and severity scoring, or willingness to learn them quickly.
Excellent written and spoken English, including the ability to turn technical detail into clear, accurate, customer-ready content.
Strong attention to detail, a data-driven approach, and comfort with deadlines and shifting priorities.
Experience working with fast-paced engineering and product teams, and ability to pick up new technologies quickly.
Comfort with ambiguity and change.

Nice to have:

A track record of improving processes through automation, including practical uses of AI, well-crafted prompts, agentic workflows, and API integrations.
Experience building agents and tools; Python scripting is welcome but not required.
Certifications such as CISA, CISM, or GIAC.
Experience with government or other regulated customers.
Experience with the Elastic Stack.

Obowiązki

Handle customer security requests, including RFPs, RFIs, security questionnaires, and due diligence, and route questions to the appropriate teams.
Own the Trust Center and keep customer security documentation accurate, up to date, and easy to navigate, including certifications, attestations, policies, and other customer materials.
Analyze customer inquiries to identify recurring questions and gaps, and propose updates to the Trust Center and customer materials.
Triage internal requests, including product security tickets and CVE-related requests.
Design and build AI-assisted workflows, automation, and process improvements focused on customer self-service and scalability.
Explain Elastic’s security posture and compliance, including SOC 2, ISO 27001, FedRAMP, and CSA STAR, to customers and internal teams.
Provide security policy guidance to employees, collaborators, and partners.
Balance day-to-day operational work with project and creative work.
Learn Elastic’s technical environment, products, and business processes, and apply that understanding to the work.

Benefity

Health coverage for you and your family in many locations.
Flexible locations and schedules for many roles.
A generous number of vacation days each year.
Matching of financial donations and service, up to $2,000 or local currency equivalent.
Up to 40 hours each year for volunteer projects.
A minimum of 16 weeks of parental leave.

Opieka zdrowotna

Elastyczne godziny

Płatne święta

Inne informacje

Applicants located in or nationals of Belarus, Cuba, Iran, North Korea, Syria, Russia, or the specified Ukrainian territories may require an export license as a condition of employment.

Elastic

24 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz