Lead the ITDR product area: define roadmap and detection/response outcomes for human and non-human/AI agent identities, work with threat research, detection engineering, data scientists, and customers, and integrate identity signals across SIEM and XDR. Role expects 10+ years of relevant product management or solution delivery experience. Based in Greece. Published salary range €73,300–€115,900 EUR (base).

Lead and grow a globally distributed engineering team responsible for endpoint visibility, prevention engines, and on-device machine learning for Elastic Defend. Own roadmap and delivery, direct machine learning and telemetry strategy, drive cross-platform protection parity, represent the team externally, and mentor senior research and engineering staff. Requires substantial hands-on security research experience, deep OS internals knowledge (kernel and user mode), reverse engineering and malware analysis skills, and people-leadership experience.

Role responsible for multi-cloud network architecture, maintaining Meraki and Aviatrix environments, deploying and supporting VPN and VDI solutions, performing security assessments and vulnerability scans, monitoring and tuning network performance, and producing documentation. Requires 5+ years network engineering experience in multi-cloud environments and 3+ years with VPN and VDI technologies.

Lead development and execution of structured threat hunts and adversary emulation exercises, translate findings into production detections with Detection Engineering, build reusable emulation libraries (e.g., Atomic Red Team, Caldera), leverage AI/ML for analysis, support incident response, and collaborate with Threat Intelligence and Security Engineering. Requires at least 8 years of relevant information security experience and familiarity with frameworks such as MITRE ATT&CK, PEAK, or TaHiTI.

Elastic seeks a Principal, Security Specialization to set the vision and operational direction for Elastic Security within services. Responsibilities include designing security service offerings, identifying high-value use cases, supporting sales and delivery of complex engagements, integrating customer feedback with Product and Engineering, leading ARB activities, and training service teams. Requires 10+ years in professional services/consulting, deep security technology and architecture expertise (including Elasticsearch), strong leadership and communication skills, and willingness to travel ~25%.

Join the Security Architecture (InfoSec) team to own end-to-end security telemetry ingestion into Elasticsearch (cloud audit logs, identity/SaaS activity, endpoint/asset data), operate Elastic on Kubernetes (ECK), manage clusters, ILM, CCS and capacity, implement infrastructure as code with Terraform, deploy jobs with Kubernetes/Helm, build Python ingestion scripts, and use AI automation to reduce toil. Eligibility for DoD IL4+ cloud environments is required.

Architect, design, and implement Okta IAM solutions including SSO, MFA, provisioning (SCIM/JIT), Okta Workflows, REST APIs and Terraform. Requires 5+ years IT experience, 3+ years Okta experience, and current residence in US Central Time. Typical starting salary range $94,300–$149,200 USD/year.

This Principal role on the Threat Research and Detection Engineering team involves designing and executing security tests for GenAI/LLM-backed products, investigating emerging multi-domain threat vectors, and producing detection content. The position requires hands-on experience with LLM tools and telemetry, detection engineering, threat research, and familiarity with Elastic Security and query languages (EQL/KQL/ESQL) is a plus.

Senior individual-contributor leader who defines priorities across detection engineering, endpoint protections, threat research, and security ML; decides investments (malware, ransomware, memory protections, AI-driven capabilities); shapes publishing strategy for Elastic Security Labs; represents Elastic externally to customers, analysts, press, and the security community; and partners with engineering, product, and delivery to turn research into shipped protections.

The VP, Threat Research owns the research and detection agenda across SIEM, endpoint, threat research, and security ML, sets quality standards for detections and protections, shapes publishing strategy for Elastic Security Labs, and represents Elastic publicly. The role is a senior technical leader (IC) reporting to the GM of Elastic Security and requires regular travel for customer meetings, conferences, and external engagements.

Join the Elasticsearch Security team to contribute to architecture, design, and implementation of core security features (authentication, authorization, tenant isolation) in Elasticsearch. Responsibilities include designing scalable authorization systems, optimizing security performance in distributed environments, applying cryptographic solutions, and driving vulnerability management in collaboration with InfoSec. Role expects strong Java/JVM knowledge, concurrency and distributed-systems security experience, and familiarity with identity protocols such as OAuth 2.0 and SAML.

Join the Elasticsearch Security team to design and implement core security features (authentication, authorization, tenant isolation), optimize security performance in distributed environments, apply cryptographic solutions, and drive vulnerability management. Role emphasizes Java/JVM expertise, concurrency, distributed systems security, identity protocols (OAuth2/SAML), and collaboration across engineering and product teams. Location: Canada.

Lead architecture and implementation of core Elasticsearch security features, including authentication, authorization (RBAC/ABAC), tenant and data isolation, cryptographic solutions, and performance optimization in distributed systems. Collaborate with product and InfoSec teams on vulnerability management, leverage AI-assisted tools to accelerate development and triage, and mentor other engineers. Requires deep Java/JVM knowledge, concurrency and distributed systems security experience, and familiarity with identity protocols (OAuth 2.0, SAML).

Lead architecture, design, and implementation of major security components in the Elasticsearch core engine, including authentication, authorization (scalable RBAC/ABAC), token validation, and data isolation. Optimize security performance for distributed systems, apply cryptographic solutions, drive vulnerability management with InfoSec, and mentor other engineers. Role lists a CAD base salary range and is based in Canada.

Lead design and implementation of enterprise SIEM and Elastic Security solutions, demonstrate value via proof-of-value projects, and advise customers on security architectures, SOC workflows, and operational processes. Requires 15+ years experience in enterprise SIEM, familiarity with AI/ML in security, forensic analysis, consultative selling, and willingness to travel 30–50%.

Lead solutions architect role focused on designing and implementing SIEM and Elastic Security-based solutions, improving incident response, delivering proof-of-value projects, and guiding SOC workflows. Requires 15+ years of enterprise SIEM experience, familiarity with AI/ML in analytics, forensic analysis, consultative selling, and strong presentation and content-creation skills. Position based in Brazil with travel of 30–50%.

Elastic seeks a Senior Solutions Architect focused on security/SIEM to design next-generation security solutions using Elastic Security and AI, deliver proof-of-value projects, and support consultative pre-sales activities. The role requires 5+ years in enterprise pre-sales, deep SIEM and SOC experience, forensic and threat-mitigation background, strong presentation and RFI/RFP skills, fluency in German and English, and travel of 30–50%.

Elastic seeks a Senior Consulting Architect to join its Global Capability Center in India to design and deliver Elastic Stack/Search AI solutions with emphasis on enterprise security (SIEM/SOAR). The role involves hands-on implementation, workshops for strategy/roadmap/design/sizing, cluster tuning and scaling, data modeling and query optimization, and collaborating with product, engineering and sales. Requires an active Elastic Certified Engineer certification, minimum 7 years’ consulting or senior IT leadership experience, strong experience with Elastic Security or comparable SIEM tools, cloud and infrastructure experience (AWS/Azure/GCP), Linux, containerization, scripting (Python/JavaScript/Go), and willingness to travel up to 20%.