Senior Java Engineer - Security - Elasticsearch

Elastic

3d • $133,100 - $252,900

About The Position

Elastic is seeking a Senior Software Developer to join the Elasticsearch Security team. The role contributes to architecture and design for core Elasticsearch security features, including authentication, authorization, and tenant isolation. Working with engineering and product leaders, the successful candidate will help deliver high-performance security for a distributed data store at scale.

The position involves taking core security initiatives from architecture through production, developing foundational security models, optimizing security performance in distributed systems, applying cryptography to customer use cases, and ensuring robust data isolation in shared infrastructure. The role also monitors security advancements and best practices, collaborates across the company to build security into customer features, and works with the InfoSec team on vulnerability management. AI-driven tools are used to streamline vulnerability triage, prioritization, and preliminary investigation.

This role is compensated through base salary, with no variable compensation component. It is currently eligible for Elastic's stock program. The typical starting salary range is $133,100–$210,600 USD, or $159,900–$252,900 USD in specified locations.

Requirements

• Deep knowledge of Java internals and JVM memory management.
• Understanding of concurrency models and experience writing high-performance, thread-safe, lock-free code in large open-source and enterprise codebases.
• Experience building scalable, performant authorization systems for high concurrency and large permission sets, including designing access models, validating credentials or tokens at scale, and maintaining consistent authorization decisions across distributed systems.
• Solid understanding of distributed systems security, including node-to-node mutual trust, zero-trust transport, partition tolerance, and cluster state propagation.
• Deep knowledge of edge identity protocols, including OAuth 2.0 and SAML.
• Proven track record of using AI to accelerate development, debug complex systems, and optimize code while collaborating on final outcomes.
• Ability to collaborate across functions and teams and transition between projects, codebases, or teams based on business priorities.
• Ability to work autonomously and support decisions and results on a distributed team through asynchronous, direct, and transparent communication.

Nice To Haves

• Knowledge of cipher suites, TLS handshakes, and PKI/certificate lifecycle management.
• Knowledge of cryptographic methods with regard to memory usage and delays.
• Familiarity with the implications of Post-Quantum Cryptography (PQC) and readiness to support migration to quantum-resistant cryptographic algorithms.
• Hands-on experience mapping engine-level technical controls to FedRAMP (Moderate/High), FIPS 140, and SOC 2 requirements.
• Experience working on the internals of a data store or search engine.

Responsibilities

• Contribute to core security initiatives from architecture through production, focusing on delivering critical features.
• Participate in technical design, planning, and execution for major security components in the Elasticsearch core engine.
• Develop foundational security models for features.
• Optimize security performance at scale in distributed systems.
• Apply cryptographic solutions to genuine customer use cases.
• Ensure robust data isolation within shared infrastructure supporting disparate customers.
• Monitor and apply the latest security advancements and best practices, including in authentication, identity management, cryptography, and data access management.
• Collaborate with peers across the company to embed security into new customer features from the outset.
• Collaborate with the InfoSec team to proactively identify, assess, and remediate security risks.
• Use AI-driven tools to automate vulnerability triage, prioritization, and preliminary investigation.

Benefits

• Stock program eligibility.
• Company-matched 401(k), with dollar-for-dollar matching up to 6% of eligible earnings.
• Health coverage for employees and their families in many locations.
• Flexible locations and schedules for many roles.
• Generous vacation days each year.
• Matching of up to $2,000 (or local currency equivalent) for financial donations and service.
• Up to 40 hours each year for volunteer projects.
• At least 16 weeks of parental leave.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed