Principal Software Engineer - Security - Elasticsearch

What you'll do

• Own security initiatives from architecture through production and lead design and delivery of major Elasticsearch core security components.
• Develop scalable security models and optimize security performance, cryptography, and customer data isolation in distributed systems.
• Partner with InfoSec and other teams on vulnerability management, use AI-driven tools to streamline security workflows, and mentor engineers.

What they ask for

• Deep knowledge of Java internals, JVM memory management, concurrency, and writing high-performance, thread-safe, lock-free code.
• Proven experience designing scalable authorization systems, including RBAC/ABAC models, token validation, permission compilation, and distributed cache invalidation.
• Solid understanding of distributed systems security and deep knowledge of OAuth 2.0 and SAML.
• Proven use of AI to accelerate development, debug systems, and optimize code while owning outcomes.

Nice to have

• Knowledge of cipher suites, TLS handshakes, PKI/certificate lifecycle management, and cryptographic performance considerations.
• Familiarity with PQC, FedRAMP, FIPS 140, SOC 2, or data store/search engine internals.

Pay

$159,800 — $252,800 USD (base salary); $191,900 — $303,500 USD (base salary)

Tools

Java, JVM, RBAC/ABAC, OAuth 2.0, SAML, TLS, PKI, PQC

AI focus

Use AI to accelerate development, debug complex systems, and optimize code; apply AI-driven tools to automate vulnerability triage, prioritization, and preliminary investigation.