E

Elastic

Searches enterprise data and monitors systems

Senior Information Security Infrastructure Engineer - Security Architecture, Infosec

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timePortugal€55.8k - €88kIn-person

About the Job

Requirements

  • Ability to operate Elastic and Elasticsearch in production, including managing ingest pipelines, index templates, mappings, and queries while ensuring clusters are healthy and upgraded.
  • Proven ability to use AI to accelerate development, debug complex systems, and accelerate operations while owning the final outcomes.
  • Ability to deploy and operate Kubernetes workloads, including scheduled jobs, Helm charts, and operators, and troubleshoot pods and jobs in a cluster.
  • Ability to manage cloud and Elasticsearch resources as code using Terraform.
  • Ability to consume REST APIs for data ingestion, including authentication, pagination, rate limiting concurrency, and error handling.
  • Ability to read, write, and modify Python ingestion and automation scripts; scripting-level proficiency is sufficient.
  • Experience with ECK or Elasticsearch on Kubernetes is strongly preferred.

Responsibilities

  • Build and maintain ingestion of security-relevant data into Elasticsearch, including cloud provider audit logs, identity and SaaS activity, endpoint data, and asset data.
  • Integrate third-party and cloud provider APIs to pull telemetry, handling authentication, pagination, rate limits, and schema changes; maintain both Elastic integrations and custom one-off integrations.
  • Monitor and regularly upgrade Elastic Cloud on Kubernetes clusters, manage capacity and shards, handle index lifecycle management, and enable cross-cluster search.
  • Use Terraform to manage cloud infrastructure and Elasticsearch resources, including pipelines, index templates, and alerts.
  • Use Kubernetes and Helm to deploy scheduled ingest jobs.
  • Use AI automation and tooling to reduce operational toil, including self-healing jobs, health checks, alerting, internal command-line interfaces, and AI- or agent-assisted workflows for investigation and operations.
  • Own security data quality and reliability by monitoring backfills, ensuring consistent schemas and fields, and monitoring costs.

Desired Qualifications

  • Experience with cloud providers, preferably Google Cloud Platform, and working with audit and logging data.
  • Knowledge of GitHub, pull-request-based workflows, GitHub Actions, and continuous integration.
  • Knowledge of security operations center operations and incident response workflows, including use of security telemetry during investigations.
  • Ability to develop and use dashboard and visualization tools.

About the Company

Elastic

Searches enterprise data and monitors systems

Elastic builds search, observability and security software for developers, IT operations teams and security analysts. Elasticsearch indexes enterprise data so applications can retrieve records, while Kibana gives teams dashboards for exploring results and investigating system activity. Customers use the tools to search business information, monitor applications and infrastructure, and investigate threats across their data. Elastic sells managed cloud services and self-managed subscriptions, with resource-based hosted pricing, usage-based serverless pricing and licenses tied to nodes and memory. Founded in 2012, Elastic lists San Francisco, California, as its headquarters.

Company size
1,001-5,000
Company stage
IPO
Headquarters
San Francisco, CA
Founded
2012

Recently Posted Jobs

Explore more opportunities at Elastic

See more jobs