Join the Elasticsearch Security team to design and implement core security features (authentication, authorization, tenant isolation) in Elasticsearch. The role requires deep Java and JVM knowledge, experience with distributed systems security, identity protocols (OAuth2, SAML), cryptography, and applying AI-driven tools to accelerate vulnerability triage and development.

Join the Elasticsearch Security team to design and implement core security features (authentication, authorization, tenant isolation), optimize security performance in distributed systems, apply cryptographic solutions, and collaborate with InfoSec and product teams. Requires deep Java/JVM knowledge, concurrency expertise, distributed systems security experience, and familiarity with identity protocols (OAuth2, SAML).

Join the Elasticsearch Security team to design and implement core security features (authentication, authorization, tenant isolation), optimize security performance in distributed systems, apply cryptographic solutions, and work on vulnerability management while collaborating across engineering and product teams. Role emphasizes Java/JVM expertise, concurrency, and experience with identity protocols (OAuth 2.0, SAML).

Join the Elasticsearch Security team to design and implement core security features (authentication, authorization, tenant isolation) in the Elasticsearch engine. The role emphasizes high-performance Java development, distributed systems security, cryptography, identity protocols (OAuth 2.0, SAML), vulnerability management, and using AI-driven tools to accelerate security workflows.

Join the Elasticsearch Security team as a Senior Java Engineer contributing to architecture, design and delivery of core security features (authentication, authorization, tenant isolation). Work involves JVM- and Java-level performance and concurrency, distributed systems security (node trust, zero-trust transport, cluster state), cryptography and identity protocols (OAuth2, SAML), vulnerability management, and leveraging AI-driven tooling to automate triage and debugging.

Enterprise-facing Consulting Architect (Security) responsible for architecting, implementing, and operationalizing Elastic Security (SIEM, endpoint, cloud) solutions. Requires 5+ years in consulting/architecture/engineering with experience in Elastic Stack or similar platforms, data ingestion/normalization tools, public cloud (AWS/Azure/GCP), Linux and a scripting language. Role may require significant travel to customer sites.

Elastic is hiring a Software Engineering Manager to lead the IAM team (Control Plane) in Elastic Cloud. The role includes mentoring and managing a distributed engineering team, planning and executing IAM initiatives, allocating resources, engaging stakeholders, driving technical decisions, and ensuring alignment with business objectives. Requires a bachelor's degree in Computer Science or related field, 8+ years in software engineering and 3+ years in IAM. Typical starting salary range: €67,000–€106,000 EUR (base salary).

Lead and mentor a distributed IAM engineering team within Elastic Cloud, drive modernization of identity and access management systems, plan and execute IAM initiatives, align technical strategy with business objectives, communicate with stakeholders, and conduct performance management. Requires 8+ years in software engineering and 3+ years in IAM.

Responsible for managing and mentoring a distributed IAM team in Elastic Cloud, delivering IAM initiatives and aligning technical strategies with business objectives. Role requires 8+ years of software engineering experience, 3+ years in identity and access management, experience with cloud-based technologies and cloud security best practices. Reported typical starting salary range: €61,100–€96,600 EUR per year.

Design and implement enterprise SIEM and security analytics solutions using Elastic Security. Lead POVs, consultative selling, RFI/RFP responses and customer presentations; support SOC workflows, incident response, forensic analysis, and ML/behavioral-analytics use cases. Requires 8+ years of SIEM experience and willingness to travel ~30%.

Elastic is hiring a Senior Incident Response Analyst to review and respond to alerts from the Elastic Detection Engine and other sources, perform SIEM and endpoint log analysis, develop detection and response approaches, identify root causes, and oversee cross-team remediation. The role requires at least 3 years of security operations/incident response experience and familiarity with cloud and SaaS environments; experience with the Elastic Stack is a plus.

Lead the design and delivery of core security features in Elasticsearch, including authentication, authorization (scalable RBAC/ABAC), tenant isolation, cryptographic solutions, and performance optimization for distributed systems. Collaborate with engineering and product leaders, drive vulnerability management (including AI-assisted triage), and mentor other engineers.

Serve as the technical authority and trusted advisor for sales, customers and partners in the region. Responsibilities include understanding customer goals, demonstrating Elastic products and solutions, advising sales on positioning, enabling partners, creating collateral, representing customer needs to engineering, and engaging the regional community through events. Role requires 10+ years in technical presales (security background) and willingness to travel regionally and occasionally internationally.

Join Elastic's Prism team to design and implement reliable, performant systems that turn security data into a trustworthy picture of users, hosts, and services. Responsibilities include end-to-end ownership of small-to-medium projects, data modeling, background tasks, APIs, profiling and optimizing queries, writing TypeScript/React and Node.js code, building telemetry and tests, and collaborating across Elastic Security, Kibana, and Elasticsearch teams. Typical starting salary range: €87,300–€138,100 EUR per year.

Join the Prism team to design and deliver scalable, performant systems that transform security data into entities and risk signals. Responsibilities include owning projects end-to-end (data modeling, background tasks, APIs), optimizing queries and performance, writing TypeScript/React and Node.js services, building telemetry and tests, and collaborating with product, design, and other Elastic teams. Experience with Elasticsearch, Kibana, SIEM/UEBA, and AI-assisted development is noted as a bonus.

Lead technical work on the Prism team to design, implement, and operate systems that convert security data into reliable entity views and risk scores. Responsibilities include data modeling, background tasks, APIs, performance profiling and optimization, writing TypeScript/React and Node.js code, building telemetry and tests, and collaborating across Elastic Security, Kibana, and Elasticsearch teams.

Join the Prism team to design and ship scalable, correct, and performant systems that turn security data into a trustworthy picture of users, hosts, and services. Responsibilities include data modeling, background tasks, APIs, performance optimization, telemetry and tests. Required: several years building production software and strong TypeScript/JavaScript skills (React, Node.js). Familiarity with Kibana, Elasticsearch, SIEM/UEBA, and performance profiling are listed as bonuses.

Join InfoSec - Security Architecture to build and maintain ingestion of security telemetry into Elasticsearch, operate and upgrade Elastic Cloud on Kubernetes clusters, manage pipelines/index templates/ILM, integrate with cloud and third-party APIs, use Terraform and Helm for deployments, apply Python scripting for automation, and improve data quality and reliability. Preferred experience includes ECK, cloud provider logs (GCP), AI-assisted tooling, and SOC/IR workflows.

Senior InfoSec Infrastructure Engineer responsible for end‑to‑end security telemetry ingestion into Elasticsearch, operating Elastic clusters (ECK/Kubernetes), managing pipelines, index lifecycle, capacity and upgrades, integrating with cloud/provider APIs, using Terraform/Helm and Python scripts, and applying AI automation to reduce toil. Collaborates with detection, IR, and SOC teams to ensure reliable security data for investigations and operations.

Role focuses on end-to-end security telemetry ingestion into Elasticsearch (cloud audit logs, identity/SaaS activity, endpoint/asset data), building and maintaining ingest pipelines, operating Elastic Cloud on Kubernetes (ECK), managing cluster health (upgrades, ILM, shards, capacity), using Terraform and Helm for infrastructure and scheduled jobs, integrating with REST APIs, and applying Python scripting and AI automation to reduce toil. Experience with cloud provider logging (preferably GCP), SOC/IR workflows, and CI/GitHub tooling is listed as a plus.