Description
Join the InfoSec - Security Architecture team as a Senior Information Security Infrastructure Engineer, where you'll play a key role in protecting Elastic's data and systems.
In this role, you'll ingest security telemetry into Elasticsearch consistently and keep the underlying Elastic clusters healthy. You'll own the pipeline end-to-end: from new security data source landing, through ingest pipelines, into indices detection, IR, and consulting teams query, plus the clusters that store it all.
Responsibilities:
- Security telemetry ingestion: build and maintain ingestion of security-relevant data into Elasticsearch
- Keep Elastic Cloud on Kubernetes clusters healthy: monitor and upgrade them regularly
- Use Terraform to manage cloud infrastructure and Elasticsearch resources
- Use AI automation and tooling to reduce toil
- Data quality & reliability: own the 'is the security data actually flowing correctly?' question
Requirements:
- Ability to operate Elastic and Elasticsearch in production
- Proven track record of using AI to accelerate development, debug complex systems, and accelerate operations
- Kubernetes: deploying and operating workloads
- Terraform: managing cloud and Elasticsearch resources as code
- API integration: consuming REST APIs for data ingestion
- Python scripting: able to read, write, and modify ingestion/automation scripts
Bonus Points:
- Experience with cloud providers
- Hands-on experience with cloud providers, preferably GCP
- Knowledge of GitHub, PR-based workflows, GitHub Actions and Continuous Integration (CI)
- Knowledge of SOC operations and incident response (IR) workflows
- Ability to develop and use dashboard/visualization tools
Benefits:
- Competitive pay
- Health coverage for you and your family
- Flexible locations and schedules
- Generous number of vacation days
- Increase your impact: match up to $2000 for financial donations and service
- Up to 40 hours each year to use toward volunteer projects
- Embracing parenthood with minimum of 16 weeks of parental leave
This listing is enriched and indexed by YubHub. To apply, use the employer's original posting:
https://job-boards.greenhouse.io/elastic/jobs/8195937