# Senior Java Engineer - Security - Elasticsearch

**Company**: Elastic
**Location**: Canada
**Experience**: senior
**Job type**: full-time
**Salary**: $128,300-$203,000 CAD
**Category**: Engineering
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/elastic/jobs/8355143?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_431f800b-5da

## Description

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale , unleashing the potential of businesses and people.

We are seeking a Senior Software Developer to join the Elasticsearch Security team. In this role, you will contribute to the architecture and design of Elasticsearch's main features, including authentication, authorization, and tenant isolation.

**Responsibilities**

- Contribute to core security initiatives from architecture to production, focusing on the delivery of new critical features.

- Participate in the technical design, planning, and execution for major security components inside the Elasticsearch core engine.

- Develop foundational security models for features.

- Optimize security performance at scale in distributed systems environments.

- Apply cryptographic solutions to address genuine customer use cases.

- Ensure robust data isolation within shared infrastructure supporting disparate customers.

- Monitor and apply the latest advancements and best practices in security.

- Collaborate with peers across the company to embed security into new customer features from the outset.

- Drive vulnerability management efforts by collaborating closely with the InfoSec team.

- Leverage AI-driven tools to automate vulnerability triage, prioritization, and preliminary investigation.

**Requirements**

- Deep knowledge of Java internals and JVM memory management.

- Experience building authorization systems that are scalable and performant under high concurrency and large permission sets.

- Solid comprehension of distributed systems security.

- Deep knowledge of edge identity protocols (OAuth 2.0, SAML).

- Proven track record of using AI to accelerate development, debug complex systems, and optimize code.

- Ability to collaborate across functions and teams.

**Nice to Have**

- Knowledge of cipher suites, TLS handshakes, and PKI/certificate lifecycle management.

- Cryptographic methods considering memory usage and delays.

- Familiarity with the implications of Post-Quantum Cryptography (PQC).

- Hands-on experience mapping engine-level technical controls to FedRAMP, FIPS 140, and SOC 2 requirements.

- Experience working on the internals of a data store or search engine.

**Compensation**

The typical starting salary range for this role is: $128,300-$203,000 CAD

**Benefits**

- Competitive pay

- Health coverage for you and your family

- Flexible locations and schedules

- Generous number of vacation days each year

- Increase your impact - We match up to $2000 (or local currency equivalent) for financial donations and service

- Up to 40 hours each year to use toward volunteer projects

- Embracing parenthood with minimum of 16 weeks of parental leave

## Skills

### Required
- Java
- JVM
- distributed systems security
- authorization systems
- edge identity protocols

### Nice to have
- cipher suites
- TLS handshakes
- PKI/certificate lifecycle management
- Post-Quantum Cryptography (PQC)
- FedRAMP
- FIPS 140
- SOC 2

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/elastic/jobs/8355143?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)