# Senior Java Engineer - Security - Elasticsearch

**Company**: Elastic
**Location**: Spain
**Experience**: senior
**Job type**: full-time
**Salary**: €67,000 - €106,000 EUR
**Category**: Engineering
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/elastic/jobs/8281637?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_d7454ea7-4ca

## Description

We are seeking a Senior Software Developer to join the Elasticsearch Security team. As a Senior Java Engineer - Security - Elasticsearch, you will contribute to the architecture and design of Elasticsearch's main features, including authentication, authorization, and tenant isolation.

**Responsibilities:**

- Contribute to core security initiatives from architecture to production, focusing on delivering new critical features.

- Participate in technical design, planning, and execution for major security components inside the Elasticsearch core engine.

- Develop foundational security models for features.

- Optimize security performance at scale in distributed systems environments.

- Apply cryptographic solutions to address genuine customer use cases.

- Ensure robust data isolation within shared infrastructure supporting disparate customers.

- Monitor and apply the latest advancements and best practices in security.

- Collaborate with peers across the company to embed security into new customer features from the outset.

- Drive vulnerability management efforts by collaborating closely with the InfoSec team.

- Leverage AI-driven tools to automate vulnerability triage, prioritization, and preliminary investigation.

**Requirements:**

- Deep knowledge of Java internals and JVM memory management.

- Experience building authorization systems that are scalable and performant under high concurrency and large permission sets.

- Solid comprehension of distributed systems security.

- Deep knowledge of edge identity protocols (OAuth 2.0, SAML).

- Proven track record of using AI to accelerate development, debug complex systems, and optimize code.

- Ability to collaborate across functions and teams and seamlessly transition between different projects, codebases, or teams based on business priorities.

- Ability to work autonomously, supporting decisions and results in a distributed team.

**Nice to Have:**

- Knowledge of cipher suites, TLS handshakes, and PKI/certificate lifecycle management.

- Cryptographic methods considering memory usage and delays.

- Familiarity with the implications of Post-Quantum Cryptography (PQC) and readiness to support the migration of services to quantum-resistant cryptographic algorithms.

- Hands-on experience mapping engine-level technical controls to FedRAMP (Moderate/High), FIPS 140, and SOC 2 requirements.

- Experience working on the internals of a data store or search engine.

The typical starting salary range for this role is: €67,000 - €106,000 EUR.

**Benefits:**

- Competitive pay based on the work you do.

- Health coverage for you and your family in many locations.

- Flexible locations and schedules for many roles.

- Generous number of vacation days each year.

- Increase your impact - We match up to $2000 (or local currency equivalent) for financial donations and service.

- Up to 40 hours each year to use toward volunteer projects.

- Embracing parenthood with a minimum of 16 weeks of parental leave.

## Skills

### Required
- Java
- Elasticsearch
- Security
- Authorization
- Cryptography
- Distributed Systems
- OAuth 2.0
- SAML

### Nice to have
- Cipher Suites
- TLS Handshakes
- PKI/Certificate Lifecycle Management
- Post-Quantum Cryptography (PQC)
- FedRAMP
- FIPS 140
- SOC 2

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/elastic/jobs/8281637?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)