← All roles

Senior Java Engineer - Security - Elasticsearch

Elastic· Platform - Data and Compute
Apply on company site
Hybrid (Spain)€67k - €106kfull-timePosted 1w ago

About the role

Senior Software Engineer focused on security for Elasticsearch, contributing to architecture, design, and implementation of core security features (authentication, authorization, tenant isolation) at scale within Elastic's Elasticsearch core engine.

Responsibilities

  • Contributing to core security initiatives from architecture to production, focusing on the delivery of new critical features. Participating in the technical design, planning, and execution for major security components inside the Elasticsearch core engine.
  • Developing the foundational security models for features.
  • Optimizing security performance at scale in distributed systems environments.
  • Applying cryptographic solutions to address genuine customer use cases.
  • Ensuring robust data isolation within shared infrastructure supporting disparate customers.
  • Monitoring and applying the latest advancements and best practices in security. This includes authentication, identity management, cryptography, and data access management.
  • Collaborating with peers across the company to embed security into new customer features from the outset.
  • Drive vulnerability management efforts by collaborating closely with the InfoSec team to proactively identify, assess, and remediate security risks.
  • Leverage AI-driven tools to automate vulnerability triage, prioritization, and preliminary investigation, streamlining security workflows and reducing manual intervention.

Qualifications

  • Deep knowledge of Java internals and JVM memory management. Understanding of concurrency models. Ability to write high-performance, thread-safe, and lock-free code with experience on large open-source and enterprise codebases.
  • Experience building authorization systems that are scalable and performant under high concurrency and large permission sets, including designing access models, validating credentials/tokens at scale, and keeping authorization decisions consistent across a distributed system.
  • Solid comprehension of distributed systems security, including node-to-node mutual trust, zero-trust transport, partition tolerance and cluster state propagation.
  • Deep knowledge of edge identity protocols (OAuth 2.0, SAML).
  • Proven track record of using AI to accelerate development, debug complex systems, and optimize code, while collaborating on final outcomes.
  • Ability to collaborate across functions and teams and transition between different projects, codebases, or teams based on business priorities.
  • Ability to work autonomously, supporting decisions and results in a distributed team through asynchronous, direct, and transparent communication.

Skills

Required:Java internals and JVM memory managementAuthorization systemsDistributed systems securityOAuth 2.0 / SAML
Nice to have:AI for development acceleration

Benefits

  • Competitive pay based on the work you do here and not your previous salary
  • Health coverage for you and your family in many locations
  • Ability to craft your calendar with flexible locations and schedules for many roles
  • Generous number of vacation days each year
  • We match up to $2000 (or local currency equivalent) for financial donations and service
  • Up to 40 hours each year to use toward volunteer projects you love
  • Minimum of 16 weeks of parental leave
  • Diversity and inclusion initiatives and equal opportunity employment commitment
Last updated Oct 15, 2026. Interested? Apply on the company site.
Elastic logo

About Elastic

The open source platform that powers search, observability, security, and more ...

Power insights and outcomes with The Elastic Search AI Platform. See into your data and find answers that matter with enterprise solutions designed to help you accelerate time to insight.

searchobservabilitysecurityAIenterprise solutionsvector database

More open roles at Elastic