Principal Software Engineer - Security - Elasticsearch

Role Description

We are seeking a Principal Software Engineer to join the Elasticsearch Security team. In this role, you will lead the architecture and design of Elasticsearch's main features, including:

• Authentication
• Authorization
• Tenant isolation

Your goal is to provide high-performance security at all levels, ensuring that our distributed data store has top-quality security at scale.

What You Will Be Doing

• Owning core security initiatives from architecture to production, focusing on the delivery of new critical features.
• Leading the technical design, plan, and execution for major security components inside the Elasticsearch core engine.
• Developing the foundational security models for intricate features.
• Optimizing security performance at scale in distributed systems environments.
• Applying cryptographic solutions to address genuine customer use cases.
• Ensuring robust data isolation within shared infrastructure supporting disparate customers.
• Monitoring and applying the latest advancements and best practices in security, including:
  • Authentication
  • Identity management
  • Cryptography
  • Data access management
• Collaborating with peers across the company to embed security into new customer features from the outset.
• Driving vulnerability management efforts by collaborating closely with the InfoSec team to proactively identify, assess, and remediate security risks.
• Leveraging AI-driven tools to automate vulnerability triage, prioritization, and preliminary investigation, streamlining security workflows and reducing manual intervention.
• Mentoring and coaching other engineers, fostering a culture of technical excellence and security-first development.

Qualifications

• Deep knowledge of Java internals and JVM memory management.
• Understanding of concurrency models.
• Ability to write high-performance, thread-safe, and lock-free code.
• Proven experience in designing and building scalable authorization systems.
• Solid comprehension of distributed systems security.
• Deep knowledge of edge identity protocols (OAuth 2.0, SAML).
• Proven track record of using AI to accelerate development and optimize code.
• Ability to collaborate across functions and teams.
• Capability to work autonomously and drive decisions.

Bonus Points

• Knowledge of cipher suites, TLS handshakes, and PKI/certificate lifecycle management.
• Cryptographic methods considering memory usage and delays.
• Familiarity with the implications of Post-Quantum Cryptography (PQC).
• Hands-on experience mapping engine-level technical controls to FedRAMP (Moderate/High), FIPS 140, and SOC 2 requirements.
• Experience working on the internals of a data store or search engine.

Compensation

Compensation for this role is in the form of base salary. The typical starting salary range for new hires in this role is:

• $159,800 — $252,800 USD

In select locations (including Seattle WA, Los Angeles CA, the San Francisco Bay Area CA, and the New York City Metro Area), an alternate range may apply:

• $191,900 — $303,500 USD

Benefits

• Competitive pay based on the work you do here and not your previous salary.
• Health coverage for you and your family in many locations.
• Flexible locations and schedules for many roles.
• Generous number of vacation days each year.
• Matching up to $2000 for financial donations and service.
• Up to 40 hours each year to use toward volunteer projects.
• A minimum of 16 weeks of parental leave.