Opportunity at
ElasticSenior Java Engineer - Security - Elasticsearch
Elastic, known as the Search AI Company, is hiring a Senior Software Developer to join its Elasticsearch Security engineering team. The firm offers cloud-based solutions spanning…
Career Tools
About This Role
Elastic, known as the Search AI Company, is hiring a Senior Software Developer to join its Elasticsearch Security engineering team. The firm offers cloud-based solutions spanning search, security, and observability, utilizing both structured and unstructured data to provide real-time search capabilities and artificial intelligence integrations for organizations globally. In this position, the professional will shape the architecture and design of core Elasticsearch features such as authentication, authorization, and tenant isolation.…
Job Description
Elastic, known as the Search AI Company, is hiring a Senior Software Developer to join its Elasticsearch Security engineering team. The firm offers cloud-based solutions spanning search, security, and observability, utilizing both structured and unstructured data to provide real-time search capabilities and artificial intelligence integrations for organizations globally.
In this position, the professional will shape the architecture and design of core Elasticsearch features such as authentication, authorization, and tenant isolation. Candidates will collaborate closely with product and engineering leaders to deliver robust, high-performance security across distributed systems. The role suits software engineering professionals who possess strong expertise in Java, distributed systems security, and cryptographic solutions.
The company operates as a distributed organization, emphasizing an inclusive culture and equal opportunity employment. Workers can benefit from flexible schedules and locations where applicable, comprehensive health coverage, and paid time off for volunteering and family care.
Responsibilities
- Contribute to core security initiatives from architecture stages through production release
- Participate in the technical design, planning, and execution for major security components inside the Elasticsearch core engine
- Develop foundational security models for software features
- Optimize security performance at scale within distributed systems environments
- Apply cryptographic solutions to address specific customer use cases
- Ensure robust data isolation within shared infrastructure supporting multiple customers
- Monitor and apply modern advancements and best practices regarding authentication, identity management, cryptography, and data access
- Collaborate across company teams to embed security into customer features from the beginning
- Drive vulnerability management by working with the InfoSec team to identify, assess, and remediate risks
- Utilize AI-driven tooling to automate vulnerability triage, prioritization, and preliminary investigations
Requirements
- Deep knowledge of Java internals and JVM memory management
- Understanding of concurrency models with the ability to write high-performance, thread-safe, and lock-free code
- Experience building scalable and performant authorization systems under high concurrency and large permission sets
- Solid comprehension of distributed systems security, including node-to-node mutual trust, zero-trust transport, partition tolerance, and cluster state propagation
- Deep knowledge of edge identity protocols such as OAuth 2.0 and SAML
- Proven track record of using artificial intelligence to accelerate development, debug complex systems, and optimize code
- Ability to collaborate across functions and adapt to changing business priorities
- Capacity to work autonomously within a distributed team using asynchronous, direct, and transparent communication
Qualifications
- Knowledge of cipher suites, TLS handshakes, and PKI or certificate lifecycle management
- Familiarity with cryptographic methods considering memory usage and delays
- Familiarity with Post-Quantum Cryptography implications and service migration readiness
- Hands-on experience mapping engine-level technical controls to FedRAMP, FIPS 140, and SOC 2 requirements
- Experience working directly on the internals of a data store or search engine
Core Skills
Benefits
- Competitive pay based on contributions
- Health coverage for employees and their families in many locations
- Flexible locations and schedules for many roles
- Generous annual vacation days
- Financial donation matching up to $2,000 or local currency equivalent
- Up to 40 hours each year for volunteer projects
- Minimum of 16 weeks of parental leave
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the employment type for this role?
The position is full-time.
Is remote work or a specific location specified?
The job posting does not state a specific city or location, but notes that the company operates as a distributed organization and offers flexible locations and schedules for many roles.
What is the salary offered for this position?
The salary is not stated in the posting, though it mentions competitive pay based on work completed rather than previous salary.
What are the core technical requirements for applicants?
Applicants must have deep knowledge of Java internals and JVM memory management, experience building scalable authorization systems, a solid understanding of distributed systems security, knowledge of edge identity protocols like OAuth 2.0 and SAML, and experience using AI to accelerate development.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.