Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI.What is The Role :Join the InfoSec - Security Architecture team as a Senior Information Security Infrastructure Engineer, where you'll have the chance to play a key role in protecting our organization's data and systems. This position offers the opportunity to work on meaningful projects that directly impact our security posture and collaborate with a skilled team passionate about information security.In this role you'll get that telemetry into Elasticsearch consistently and keep the underlying Elastic clusters healthy.

You own the pipeline end to end: from a new security data source landing, through ingest pipelines, into the indices detection, IR, and consulting teams query, plus the clusters that store it all.

What You Will Be

Doing :Security telemetry ingestion - build and maintain ingestion of security-relevant data into Elasticsearch (cloud provider audit logs, identity/SaaS activity, endpoint and asset data). This means integrating with third-party and cloud provider APIs to pull telemetry: auth, pagination, rate limits, and handling schema changes. Keep the Elastic Cloud on Kubernetes clusters healthy. Use Terraform to manage cloud infrastructure and Elasticsearch resources.

Utilize

Kubernetes and Helm to deploy scheduled ingest jobs.It also involves alerting, internal CLIs, and AI or agent-assisted workflows for investigation and operations.Data quality & reliability - Own the "is the security data actually flowing correctly?" What You Bring :Ability to operate Elastic and Elasticsearch in production.





Experience with ECK or Elasticsearch on Kubernetes is strongly preferred.Kubernetes - deploying and operating workloads (scheduled jobs, Helm charts, operators); Terraform - managing cloud and Elasticsearch resources as code.API integration - consuming REST APIs for data ingestion: authentication, pagination, rate limiting concurrency, and error handling.Python scripting - able to read, write, and modify ingestion/automation scripts. Scripting-level, not full software-engineering depth.Eligibility to work in Department of Defense (DoD) Impact Level 4 or above cloud service environments.Experience with cloud providers.Hands-on experience with cloud providers, preferably GCP, and working with audit and logging data.Knowledge of GitHub, PR-based workflows, GitHub Actions and Continuous Integration (CI).It doesn’t matter if you’re just out of college or your children are; Competitive pay based on the work you do here and not your previous salaryHealth coverage for you and your family in many locationsAbility to craft your calendar with versátil locations and schedules for many rolesGenerous number of vacation days each yearIncrease your impact - We match up to $2000 (or local currency equivalent) for financial donations and serviceUp to 40 hours each year to use toward volunteer projects you loveEmbracing parenthood with minimum of 16 weeks of parental leaveDifferent people approach problems differently. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, pregnancy, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, disability status, or any other basis protected by federal, state or local law, ordinance or regulation.Employee Polygraph Protection Act (EPPA)Poster and Know Your Rights (Poster)Elasticsearch develops and distributes technology and information that is subject to U.Belarus, Cuba, Iran, North Korea, Syria, or Russia, including the Ukrainian territories annexed by Russia (The Crimea region of Ukraine, The Donetsk People's Republic (DNR), The Luhansk People's Republic (LNR), Kherson or Zaporizhzhia).

📌 Senior Information Security Infrastructure Engineer - Security Architecture - InfoSec (Madrid)
🏢 Elastic
📍 Madrid