E

Elastic

Searches enterprise data and monitors systems

Senior Information Security Infrastructure Engineer - Security Architecture, Infosec

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeIreland€87.3k - €138kIn-person

About the Job

Requirements

  • Ability to operate Elastic and Elasticsearch in production, including managing ingest pipelines, index templates, mappings, and queries, and ensuring clusters remain healthy and are upgraded.
  • Experience using AI to accelerate development, debug complex systems, and accelerate operations while owning the final outcomes.
  • Ability to deploy and operate Kubernetes workloads, including scheduled jobs, Helm charts, and operators, and troubleshoot pods and jobs in a cluster.
  • Experience managing cloud and Elasticsearch resources as code with Terraform.
  • Experience consuming REST APIs for data ingestion, including authentication, pagination, rate limiting, concurrency, and error handling.
  • Ability to read, write, and modify Python ingestion and automation scripts.

Responsibilities

  • Build and maintain ingestion of security-relevant telemetry into Elasticsearch, including cloud provider audit logs, identity and SaaS activity, endpoint data, and asset data.
  • Integrate with third-party and cloud provider APIs to retrieve telemetry, handling authentication, pagination, rate limits, and schema changes; develop both Elastic integrations and custom integrations.
  • Monitor, maintain, and regularly upgrade Elastic Cloud on Kubernetes clusters; manage versions, builds, capacity, shards, index lifecycle management, and cross-cluster search.
  • Use Terraform to manage cloud infrastructure and Elasticsearch resources, including pipelines, index templates, and alerts.
  • Use Kubernetes and Helm to deploy scheduled ingestion jobs.
  • Use AI automation and tooling to reduce operational toil, including self-healing jobs, health checks, alerting, internal command-line tools, and AI- or agent-assisted investigation and operations.
  • Monitor backfills, ensure security-data schemas and fields are consistent, verify that security data is flowing correctly, and monitor costs.

Desired Qualifications

  • Experience with Elastic Cloud on Kubernetes or Elasticsearch on Kubernetes is strongly preferred.
  • Experience with cloud providers, preferably Google Cloud Platform, and audit and logging data.
  • Knowledge of GitHub, pull-request-based workflows, GitHub Actions, and continuous integration.
  • Knowledge of security operations center operations and incident response workflows, including use of security telemetry during investigations.
  • Ability to develop and use dashboard and visualization tools.

About the Company

Elastic

Searches enterprise data and monitors systems

Elastic builds search, observability and security software for developers, IT operations teams and security analysts. Elasticsearch indexes enterprise data so applications can retrieve records, while Kibana gives teams dashboards for exploring results and investigating system activity. Customers use the tools to search business information, monitor applications and infrastructure, and investigate threats across their data. Elastic sells managed cloud services and self-managed subscriptions, with resource-based hosted pricing, usage-based serverless pricing and licenses tied to nodes and memory. Founded in 2012, Elastic lists San Francisco, California, as its headquarters.

Company size
1,001-5,000
Company stage
IPO
Headquarters
San Francisco, CA
Founded
2012

Recently Posted Jobs

Explore more opportunities at Elastic

See more jobs