Principal Software Engineer - Security - Elasticsearch

About the Role

Elastic is seeking a Principal Software Engineer to join the Elasticsearch Security team. You will lead the architecture and design of core security features, including authentication, authorization, and tenant isolation, ensuring high-performance security for our distributed data store at scale.

Key Responsibilities

• Technical Leadership: Own core security initiatives from architecture to production, leading technical design and execution for major Elasticsearch engine components.
• Security Engineering: Develop foundational security models, optimize performance in distributed environments, and apply cryptographic solutions to real-world use cases.
• Data Integrity: Ensure robust data isolation within shared infrastructure.
• Vulnerability Management: Collaborate with the InfoSec team to identify, assess, and remediate risks, leveraging AI-driven tools for automated triage.
• Mentorship: Coach and mentor engineers to foster a culture of technical excellence and security-first development.
• Collaboration: Work across functions to embed security into new features from the outset.

What You Bring

• Java Expertise: Deep knowledge of Java internals, JVM memory management, and high-performance, thread-safe, lock-free coding.
• Authorization Systems: Proven experience designing scalable RBAC/ABAC models and token validation pipelines.
• Distributed Systems: Solid comprehension of node-to-node mutual trust, zero-trust transport, and cluster state propagation.
• Identity Protocols: Deep knowledge of OAuth 2.0 and SAML.
• AI Integration: Track record of using AI to accelerate development and optimize complex systems.
• Autonomy: Ability to drive decisions and lead distributed teams using asynchronous communication.

Bonus Points

• Experience with TLS, PKI, and certificate lifecycle management.
• Knowledge of Post-Quantum Cryptography (PQC) implications.
• Familiarity with FedRAMP, FIPS 140, or SOC 2 compliance.
• Experience working on the internals of a data store or search engine.

Benefits

• Competitive pay with stock program eligibility.
• 401k matching up to 6%.
• Flexible locations and schedules.
• Generous vacation policy and 16+ weeks of parental leave.
• Donation matching and volunteer time off.