OverviewIn this role, you will help design and implement core security features for Elasticsearch, focusing on authentication, authorization, and tenant isolation.
You'll work with engineering and product leaders to deliver high-performance security at scale in a distributed data store.
The role emphasizes building secure, scalable components and applying cryptographic approaches to real customer use cases.
You'll collaborate across teams to embed security from the outset and advance vulnerability management with the InfoSec group.
Compensaciones / Beneficioscompetitive pay health coverage for you and family adaptable locations and schedules generous vacation days donation matching volunteer hours
ResponsabilidadesContribute to core security initiatives from architecture to production, delivering new critical features.
Participate in technical design, planning, and execution for major security components in the Elasticsearch core engine.
Develop foundational security models for features and optimize security performance at scale.
Apply cryptographic solutions to address customer use cases and ensure robust data isolation.
Stay current with security best practices in authentication, identity management, cryptography,
and data access management.
Collaborate with cross-functional peers to embed security into new customer features from the outset.
Lead vulnerability management efforts with the InfoSec team and leverage AI-driven tools to streamline triage and investigation.
Requisitos principalesDeep knowledge of Java internals and JVM memory management
Experience with concurrency models and writing high-performance, thread-safe, lock-free code
Experience building scalable, performant authorization systems under high concurrency
Solid understanding of distributed systems security, including mutual trust, zero-trust transport, partition tolerance, and state propagation
Knowledge of edge identity protocols (OAuth 2.0, SAML)
Proven ability to leverage AI to accelerate development and debugging while collaborating on outcomes
Ability to work across functions and teams and communicate asynchronously in a distributed setup collaboration across functions and teams autonomous work style clear, asynchronous communication
Java internals and JVM memory management concurrency and thread-safety authorization systems design at scale