InfoSec Analyst - Business Enablement

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale , unleashing the potential of businesses and people.

We're hiring an InfoSec Analyst to join the Business Enablement team within Information Security (InfoSec). InfoSec manages the security strategy, policy, and programs for the entire company. This includes risk management, compliance, security controls, threat prevention and detection, and incident response.

In this role, you'll help Elastic win and keep customer trust, and you'll support the security requests and vulnerability work that come through the team's queues. You'll work closely with Sales, Solution Architects, Support, Legal, Engineering, and other InfoSec teams, using AI and automation to do this work faster and with a focus on what customers actually need.

Responsibilities

• Handle customer security requests such as RFPs, RFIs, security questionnaires, and due diligence, and route questions that need other teams' expertise to the right owners.
• Own our Trust Center. Ensure the content and security documentation for customers are accurate and up-to-date. Make it easy to navigate. This includes certifications, attestations, policies, and other customer materials.
• Analyze incoming customer inquiries to spot recurring questions and gaps, and turn them into proposed updates to the Trust Center and customer artifacts.
• Triage the team's internal request queue, including product security-related tickets and CVE-related requests.
• Design and build AI-assisted workflows, automation, and process improvements that make the team faster and more scalable, with a focus on customer-centricity and self-service.
• Explain Elastic's security posture and compliance (e.g., SOC 2, ISO 27001, FedRAMP, CSA STAR) in clear terms to customers and internal teams.
• Provide security policy guidance to employees, collaborators, and partners.
• Balance day-to-day operational work with project and creative work.
• Learn Elastic's technical environment, products, business processes, and culture, and bring that understanding into your work.

Requirements

• Experience in security GRC, customer trust, security assurance, or a similar function, including answering security questionnaires, RFPs, or due diligence requests.
• Working knowledge of security domains and frameworks (e.g., ISO 27001, SOC 2, NIST, GDPR) and the ability to discuss technical topics with engineers and domain experts.
• An automation-first mindset, and comfort using AI tools in your day-to-day work.
• Familiarity with vulnerability management concepts such as CVEs and severity scoring, or the willingness to learn them quickly.
• Excellent written and spoken English, with the ability to turn technical detail into clear, accurate, customer-ready content.
• Strong attention to detail, a data-driven approach, and comfort with deadlines and shifting priorities.
• Experience working with fast-paced engineering and product teams, and the ability to pick up new technologies quickly.
• Comfort with ambiguity and change.

Nice to Have

• A track record of improving processes through automation, including using AI in smart, practical ways: well-crafted prompts, agentic workflows, API integrations.
• Building your own agents and tools (Python scripting is welcome, but not required).
• Certifications such as CISA, CISM, or GIAC.
• Experience with government or other regulated customers.
• Experience with the Elastic Stack.

Benefits

• Competitive pay based on the work you do here and not your previous salary
• Health coverage for you and your family in many locations
• Ability to craft your calendar with flexible locations and schedules for many roles
• Generous number of vacation days each year
• Increase your impact - We match up to $2000 (or local currency equivalent) for financial donations and service
• Up to 40 hours each year to use toward volunteer projects you love
• Embracing parenthood with a minimum of 16 weeks of parental leave