Senior Java Engineer - Security - Elasticsearch

We are seeking a Senior Software Developer to join the Elasticsearch Security team. As a Senior Java Engineer - Security - Elasticsearch, you will contribute to the architecture and design of Elasticsearch's main features, including authentication, authorization, and tenant isolation.

Responsibilities:

• Contribute to core security initiatives from architecture to production, focusing on delivering new critical features.
• Participate in technical design, planning, and execution for major security components inside the Elasticsearch core engine.
• Develop foundational security models for features.
• Optimize security performance at scale in distributed systems environments.
• Apply cryptographic solutions to address genuine customer use cases.
• Ensure robust data isolation within shared infrastructure supporting disparate customers.
• Monitor and apply the latest advancements and best practices in security.
• Collaborate with peers across the company to embed security into new customer features from the outset.
• Drive vulnerability management efforts by collaborating closely with the InfoSec team.
• Leverage AI-driven tools to automate vulnerability triage, prioritization, and preliminary investigation.

Requirements:

• Deep knowledge of Java internals and JVM memory management.
• Experience building authorization systems that are scalable and performant under high concurrency and large permission sets.
• Solid comprehension of distributed systems security.
• Deep knowledge of edge identity protocols (OAuth 2.0, SAML).
• Proven track record of using AI to accelerate development, debug complex systems, and optimize code.
• Ability to collaborate across functions and teams and seamlessly transition between different projects, codebases, or teams based on business priorities.
• Ability to work autonomously, supporting decisions and results in a distributed team.

Nice to Have:

• Knowledge of cipher suites, TLS handshakes, and PKI/certificate lifecycle management.
• Cryptographic methods considering memory usage and delays.
• Familiarity with the implications of Post-Quantum Cryptography (PQC) and readiness to support the migration of services to quantum-resistant cryptographic algorithms.
• Hands-on experience mapping engine-level technical controls to FedRAMP (Moderate/High), FIPS 140, and SOC 2 requirements.
• Experience working on the internals of a data store or search engine.

The typical starting salary range for this role is: €67,000 - €106,000 EUR.

Benefits:

• Competitive pay based on the work you do.
• Health coverage for you and your family in many locations.
• Flexible locations and schedules for many roles.
• Generous number of vacation days each year.
• Increase your impact - We match up to $2000 (or local currency equivalent) for financial donations and service.
• Up to 40 hours each year to use toward volunteer projects.
• Embracing parenthood with a minimum of 16 weeks of parental leave.