Senior Software Developer - Security - Elasticsearch

Join the Elasticsearch Security team and contribute to the architecture and design of Elasticsearch's core security features, including authentication, authorization, and tenant isolation. Working with engineering and product leaders across Elastic, your goal is high-performance security at every level, ensuring the distributed data store delivers top-quality security at scale.

Responsibilities

• Contribute to core security initiatives from architecture to production, participating in technical design, planning, and execution for major security components inside the Elasticsearch core engine.
• Develop the foundational security models for intricate features and optimize security performance at scale in distributed systems environments.
• Apply cryptographic solutions to genuine customer use cases and ensure robust data isolation within shared infrastructure serving disparate customers.
• Track and apply the latest advancements in authentication, identity management, cryptography, and data access management.
• Collaborate with peers across the company to embed security into new customer features from the outset.
• Drive vulnerability management with the InfoSec team, using AI-driven tools to automate triage, prioritization, and preliminary investigation.

Qualifications

• Deep knowledge of Java internals and JVM memory management, with the ability to write high-performance, thread-safe, lock-free code in large open source and enterprise codebases.
• Experience building authorization systems that stay scalable and performant under high concurrency and large permission sets, keeping authorization decisions consistent across a distributed system.
• Solid comprehension of distributed systems security: node-to-node mutual trust, zero-trust transport, partition tolerance, and cluster state propagation.
• Deep knowledge of edge identity protocols (OAuth 2.0, SAML).
• Track record of using AI to accelerate development, debug complex systems, and optimize code.
• Comfortable working autonomously in a distributed team through asynchronous, direct, and transparent communication.
• Bonus points for TLS/PKI and cipher suite knowledge, latency-aware cryptographic methods, Post-Quantum Cryptography readiness, FedRAMP/FIPS 140/SOC 2 control mapping, and data store or search engine internals experience.