Senior Information Security Infrastructure Engineer - Security Architecture - InfoSec

7 hours, 37 minutes ago
Full-time
Senior
DevOps and Infrastructure
Elastic

Elastic

Elastic is a leading platform for search-powered solutions, providing real-time insights and making data usable for developers and enterprises worldwide.

Internet Software & Services
1K-5K
Founded 2010

Description

  • Build and maintain ingestion pipelines for cloud audit logs, identity and SaaS activity, endpoint data, and asset telemetry.
  • Integrate third-party and cloud-provider APIs, handling authentication, pagination, rate limits, concurrency, errors, and schema changes.
  • Operate and maintain Elastic Cloud on Kubernetes clusters, including monitoring, upgrades, capacity, shards, ILM, and cross-cluster search.
  • Use Terraform to manage cloud infrastructure, Elasticsearch resources, pipelines, index templates, and alerts.
  • Deploy scheduled ingestion jobs with Kubernetes and Helm.
  • Develop automation such as self-healing jobs, health checks, alerting, internal CLIs, and AI-assisted operational workflows.
  • Monitor data quality, backfills, schema consistency, reliability, and ingestion costs.
  • Own the end-to-end security data pipeline from source onboarding through storage and availability for downstream security teams.

Requirements

  • Production experience operating Elastic or Elasticsearch, including ingest pipelines, index templates, mappings, queries, cluster health, and upgrades.
  • Experience with ECK or Elasticsearch on Kubernetes is strongly preferred.
  • Experience deploying and troubleshooting Kubernetes workloads, scheduled jobs, Helm charts, and operators.
  • Experience managing cloud and Elasticsearch resources with Terraform.
  • Ability to consume REST APIs for data ingestion, including authentication, pagination, rate limiting, concurrency, and error handling.
  • Python scripting experience sufficient to read, write, and modify ingestion and automation scripts.
  • Demonstrated use of AI to accelerate development, debug complex systems, and improve operations while owning outcomes.
  • Eligibility to work in Department of Defense Impact Level 4 or higher cloud environments.
  • Cloud-provider experience, preferably GCP, including audit and logging data, is preferred.
  • Knowledge of GitHub, pull-request workflows, GitHub Actions, CI, SOC operations, incident response, and security dashboards is preferred.

Benefits

  • Competitive pay based on role responsibilities rather than previous salary.
  • Health coverage for employees and families in many locations.
  • Flexible work locations and schedules for many roles.
  • Generous annual vacation allowance.
  • Company matching of up to $2,000 for financial donations and service.
  • Up to 40 hours annually for volunteer projects.
  • At least 16 weeks of parental leave.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Cybersecurity Specialist (DISA)

Horizon Industries Limited is seeking a Cybersecurity Specialist to support DISA enterprise software systems remotely in the USA, providing security engineering and information assurance support in an agile environment.

Agile Bash Cybersecurity Linux Perl SIEM SQL Windows Server
7 hours, 37 minutes ago

Director, Security Research

Sysdig 251-1K IT Services

Sysdig is hiring a senior leader to direct its Threat Research Team, focusing on AI security threats, AI-assisted research methods, and production detection capabilities for Sysdig customers and the Falco community.

Kubernetes Linux
8 hours, 7 minutes ago

Security Engineer - SOAR

Centorrino Technologies 51-250 Internet Software & Services

Centorrino Technologies is seeking a Security Engineer specializing in SOAR to develop and implement secure, automated incident-response capabilities for cloud and hybrid environments in Australia.

Network Security
8 hours, 52 minutes ago

Security Operations Engineer (Europe - Remote)

SpotMe 51-250 Professional Services

SpotMe is hiring a Security Operations Engineer to strengthen security across its identity systems, macOS fleet, SaaS tools, and internal telemetry supporting its B2B event and healthcare engagement platforms.

HTTP macOS REST API SAML
1 day, 7 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers