Senior Information Security Infrastructure Engineer - Security Architecture

About the role

Elastic, the Search AI company, is hiring a Senior Information Security Infrastructure Engineer in its InfoSec - Security Architecture team. The engineer ingests security telemetry into Elasticsearch, keeps the underlying Elastic clusters healthy and owns the pipeline end to end, from new security data sources through ingest pipelines to the indices used by detection, IR and consulting teams.

Key responsibilities

• Build and maintain ingestion of security data into Elasticsearch, including cloud provider audit logs, identity/SaaS activity and endpoint and asset data, via third-party and cloud provider APIs
• Keep Elastic Cloud on Kubernetes clusters healthy: monitor and upgrade them, manage capacity and shards, handle index lifecycle management (ILM) and enable cross-cluster search (CCS)
• Manage cloud infrastructure and Elasticsearch resources as code with Terraform, including pipelines, index templates and alerts
• Deploy scheduled ingest jobs with Kubernetes and Helm, and use AI automation such as self-healing jobs, health checks and agent-assisted workflows
• Own data quality and reliability: monitor backfills, ensure schema and field consistency and keep an eye on costs

Required profile

• Ability to operate Elastic and Elasticsearch in production, including ingest pipelines, index templates, mappings and queries; ECK or Elasticsearch on Kubernetes strongly preferred
• Proven track record of using AI to accelerate development, debugging and operations
• Experience with Kubernetes workloads (Helm charts, operators, scheduled jobs) and troubleshooting pods and jobs
• Experience with API integration (REST, authentication, pagination, rate limiting, error handling) and Python scripting at script level

Required skills

• Terraform
• Kubernetes and Helm
• Elasticsearch and ECK
• REST API integration
• Python scripting

Bonus points

• Cloud provider experience, preferably GCP, with audit and logging data
• Github, GitHub Actions and CI knowledge
• SOC operations and incident response workflows
• Dashboards and visualization tools

What we offer

• Competitive pay based on the role, not previous salary
• Health coverage for you and your family in many locations
• Flexible locations and schedules for many roles
• Generous vacation days each year
• Volunteer time and financial donation matching
• Parental leave of at least 16 weeks