E

Elastic

Searches enterprise data and monitors systems

Senior Information Security Infrastructure Engineer - Security Architecture, Infosec

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timePolandPLN307.8k - PLN485kIn-person

About the Job

Requirements

  • Ability to operate Elastic and Elasticsearch in production, including managing ingest pipelines, index templates, mappings, and queries, and ensuring clusters are healthy and upgraded.
  • Experience using AI to accelerate development, debug complex systems, and accelerate operations while owning the outcomes.
  • Ability to deploy and operate Kubernetes workloads, including scheduled jobs, Helm charts, and operators, and troubleshoot pods and jobs in a cluster.
  • Experience managing cloud and Elasticsearch resources as code with Terraform.
  • Ability to consume REST APIs for data ingestion, including authentication, pagination, rate limiting, concurrency, and error handling.
  • Ability to read, write, and modify Python ingestion and automation scripts.
  • Experience with Elastic Cloud on Kubernetes (ECK) or Elasticsearch on Kubernetes is strongly preferred.

Responsibilities

  • Build and maintain ingestion of security-relevant data into Elasticsearch, including cloud provider audit logs, identity and SaaS activity, endpoint data, and asset data.
  • Integrate with third-party and cloud provider APIs to ingest telemetry, handling authentication, pagination, rate limits, and schema changes; implement both Elastic integrations and custom integrations.
  • Monitor and regularly upgrade Elastic Cloud on Kubernetes clusters, manage capacity and shards, handle index lifecycle management, and enable cross-cluster search.
  • Use Terraform to manage cloud infrastructure and Elasticsearch resources, including pipelines, index templates, and alerts.
  • Use Kubernetes and Helm to deploy scheduled ingestion jobs.
  • Use AI automation and tooling to reduce operational toil, including self-healing jobs, health checks, alerting, internal command-line interfaces, and AI- or agent-assisted investigation and operations workflows.
  • Own security-data quality and reliability by monitoring backfills, ensuring schema and field consistency, and monitoring costs.

Desired Qualifications

  • Experience with cloud providers, preferably Google Cloud Platform, including audit and logging data.
  • Knowledge of GitHub, pull-request-based workflows, GitHub Actions, and continuous integration.
  • Knowledge of security operations center operations and incident response workflows, including use of security telemetry during investigations.
  • Ability to develop and use dashboard and visualization tools.

About the Company

Elastic

Searches enterprise data and monitors systems

Elastic builds search, observability and security software for developers, IT operations teams and security analysts. Elasticsearch indexes enterprise data so applications can retrieve records, while Kibana gives teams dashboards for exploring results and investigating system activity. Customers use the tools to search business information, monitor applications and infrastructure, and investigate threats across their data. Elastic sells managed cloud services and self-managed subscriptions, with resource-based hosted pricing, usage-based serverless pricing and licenses tied to nodes and memory. Founded in 2012, Elastic lists San Francisco, California, as its headquarters.

Company size
1,001-5,000
Company stage
IPO
Headquarters
San Francisco, CA
Founded
2012

Recently Posted Jobs

Explore more opportunities at Elastic

See more jobs