Senior Information Security Infrastructure Engineer - Security Architecture - InfoSec

Overview

Elastic is hiring a Senior Information Security Infrastructure Engineer specializing in Security Architecture and InfoSec. The position is based in Europe within a distributed company setup that offers flexible locations and schedules.

What You Will Be Doing

The role involves building and maintaining the ingestion of security-relevant data into Elasticsearch, including cloud provider audit logs, identity and SaaS activity, and endpoint and asset data through third-party and cloud provider APIs. Responsibilities include keeping Elastic Cloud on Kubernetes clusters healthy, managing capacity and shards, handling index lifecycle management, and enabling cross-cluster search.

The engineer uses Terraform to manage cloud infrastructure and Elasticsearch resources, and utilizes Kubernetes and Helm to deploy scheduled ingest jobs. Additional duties include applying AI automation and tooling to reduce toil through self-healing jobs, health checks, alerting, internal command line interfaces, and AI-assisted workflows. The role also requires owning data quality and reliability by monitoring backfills, ensuring consistent schemas and fields, and keeping track of costs.

Requirements

Candidates must have experience operating Elastic and Elasticsearch in production, including managing ingest pipelines, index templates, mappings, queries, and cluster upgrades, with experience using Elasticsearch on Kubernetes strongly preferred. Applicants need a proven track record of using AI to accelerate development and operations, along with experience deploying and operating Kubernetes workloads such as scheduled jobs, Helm charts, and operators, and troubleshooting pods and jobs.

Required technical proficiencies include using Terraform to manage infrastructure and resources as code, consuming REST APIs for data ingestion while handling authentication, pagination, rate limiting, and errors, and writing Python scripts for ingestion and automation tasks. Bonus qualifications include experience with cloud providers such as Google Cloud Platform, familiarity with GitHub and continuous integration workflows, knowledge of security operations center operations and incident response, and the ability to develop dashboard and visualization tools.

What You Get

Employees receive competitive pay based on their work, health coverage for staff and their families in many locations, and a generous number of vacation days each year. Additional benefits include a matching program for financial donations and service up to two thousand dollars or the local currency equivalent, up to forty hours each year for volunteer projects, and a minimum of sixteen weeks of parental leave.