[Hiring] Principal Software Developer - Security - Elasticsearch @Elastic

Role Description

We are seeking a Principal Software Developer to join the Elasticsearch Security team. In this role, you will lead the architecture and design of Elasticsearch's main features, including:

• Authentication
• Authorization
• Tenant isolation

Your goal is to provide high-performance security at all levels, ensuring that our distributed data store has top-quality security at scale.

What You Will Be Doing

• Owning core security initiatives from architecture to production, focusing on the delivery of new critical features.
• Leading the technical design, plan, and execution for major security components inside the Elasticsearch core engine.
• Developing the foundational security models for intricate features.
• Optimizing security performance at scale in distributed systems environments.
• Applying cryptographic solutions to address genuine customer use cases.
• Ensuring robust data isolation within shared infrastructure supporting disparate customers.
• Monitoring and applying the latest advancements and best practices in security, including:
  • Authentication
  • Identity management
  • Cryptography
  • Data access management
• Collaborating with peers across the company to embed security into new customer features from the outset.
• Driving vulnerability management efforts by collaborating closely with the InfoSec team to proactively identify, assess, and remediate security risks.
• Leveraging AI-driven tools to automate vulnerability triage, prioritization, and preliminary investigation, streamlining security workflows and reducing manual intervention.
• Mentoring and coaching other engineers, fostering a culture of technical excellence and security-first development.

Qualifications

• Deep knowledge of Java internals and JVM memory management.
• Understanding of concurrency models and ability to write high-performance, thread-safe, and lock-free code.
• Proven experience in designing and building scalable authorization systems, including RBAC/ABAC models and token validation pipelines.
• Solid comprehension of distributed systems security, including node-to-node mutual trust and zero-trust transport.
• Deep knowledge of edge identity protocols (OAuth 2.0, SAML).
• Proven track record of using AI to accelerate development and optimize code.
• Ability to collaborate across functions and teams, transitioning between different projects based on business priorities.
• Ability to work autonomously, drive decisions, and lead a distributed team.

Bonus Points

• Knowledge of cipher suites, TLS handshakes, and PKI/certificate lifecycle management.
• Cryptographic methods considering memory usage and delays.
• Familiarity with Post-Quantum Cryptography (PQC) and readiness to support migration to quantum-resistant algorithms.
• Hands-on experience mapping engine-level technical controls to FedRAMP, FIPS 140, and SOC 2 requirements.
• Experience working on the internals of a data store or search engine.

Compensation

Compensation for this role is in the form of base salary. The typical starting salary range for new hires in this role is:

• $154,000 — $243,600 CAD

This role does not have a variable compensation component. An employee's position within the salary range will be based on several factors including education, qualifications, certifications, experience, skills, geographic location, performance, and business needs.

Benefits

• Competitive pay based on the work you do here and not your previous salary.
• Health coverage for you and your family in many locations.
• Flexible locations and schedules for many roles.
• Generous number of vacation days each year.
• We match up to $2000 (or local currency equivalent) for financial donations and service.
• Up to 40 hours each year to use toward volunteer projects.
• Minimum of 16 weeks of parental leave.