Principal Software Developer - Security - Elasticsearch

Elastic
Canada
Workplace: OnsiteFull timeFunction: Software EngineeringSkills: ["Mentoring","Collaboration","Autonomy","Technical leadership","Security-first development"]

Lead the architecture and design of core Elasticsearch Security features, including authentication, authorization, and tenant isolation. Own security initiatives from design through production, delivering scalable authorization models (RBAC/ABAC), token validation pipelines, and secure data isolation in distributed systems. Optimize security performance at scale, apply cryptography for real customer needs, and drive vulnerability management with InfoSec, using AI tools to streamline triage. Mentor engineers and embed security into product delivery from the start.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Elastic
Elastic
1 month ago

Principal Software Developer - Security - Elasticsearch

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 12 hours agoStatus: Live

Job Summary

Lead the architecture and design of core Elasticsearch Security features, including authentication, authorization, and tenant isolation. Own security initiatives from design through production, delivering scalable authorization models (RBAC/ABAC), token validation pipelines, and secure data isolation in distributed systems. Optimize security performance at scale, apply cryptography for real customer needs, and drive vulnerability management with InfoSec, using AI tools to streamline triage. Mentor engineers and embed security into product delivery from the start.
Location: Canada
Workplace: Onsite
Employment Type: Full time
Job Function: Software Engineering
Seniority: Mid level

Key Responsibilities

  • •Own security initiatives from architecture through production delivery of critical features in the Elasticsearch core engine.
  • •Develop foundational security models for complex features.
  • •Optimize security performance at scale in distributed systems and ensure robust data isolation for shared infrastructure.
  • •Monitor and apply security best practices across authentication, identity management, cryptography, and data access management.
  • •Collaborate with InfoSec on vulnerability management and use AI-driven tooling to automate vulnerability triage and preliminary investigation.

Pay and Benefits

Perks:Health InsuranceEquityRrspPaid LeaveParental Leave

Key Requirements

  • •Deep knowledge of Java internals and JVM memory management, with the ability to write high-performance, thread-safe, lock-free code.
  • •Proven experience designing and building scalable authorization systems, including RBAC/ABAC models and token validation pipelines.
  • •Strong understanding of distributed systems security, including mutual trust, zero-trust transport, partition tolerance, and cluster state propagation.
  • •Deep knowledge of edge identity protocols such as OAuth 2.0 and SAML.
  • •Experience using AI to accelerate development, debugging, and optimization while still owning outcomes.
Skills:MentoringCollaborationAutonomyTechnical leadershipSecurity-first development
Languages:English
Tech Stack:JavaJVMRBACABACToken validationOAuth 2.0SAMLCryptographyTLSPKIFedRAMPFIPS 140SOC 2Post-Quantum CryptographyElasticsearch

Company Brief

Elastic
Builds the Elastic Stack (Elasticsearch, Kibana, Beats, Logstash) and provides search, observability, and security solutions that enable organizations to search, analyze, and protect data in real time across applications, infrastructure, and enterprises.
Industry: Data Infrastructure
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Amsterdam, Netherlands
Founded: 2012
WebsiteLinkedIn