Senior Information Security Infrastructure Engineer - Security Architecture

Elastic is hiring a Senior Information Security Infrastructure Engineer into the Security Architecture team within InfoSec, based in the United Kingdom. The team ingests the security telemetry the whole security organisation runs on, and owns that pipeline end to end: from a new data source landing, through the ingest path, into the indices that detection, incident response and consulting teams query, and the clusters storing it all.

What you would work on - Building and maintaining ingestion of security telemetry into Elasticsearch from cloud provider audit logs, identity and SaaS activity, and endpoint data - Keeping Elastic Cloud on Kubernetes clusters healthy, covering monitoring, upgrades, capacity and index lifecycle management - Managing cloud infrastructure and Elasticsearch resources through Terraform - Deploying scheduled ingest jobs using Kubernetes and Helm - Watching data quality and reliability so that schemas and field integrity stay consistent - Applying AI tooling to cut down repetitive operational work

What they are looking for - Experience operating Elasticsearch in production, including ingest pipelines, index templates and cluster health; ECK or Elasticsearch on Kubernetes is strongly preferred - Confidence deploying to and troubleshooting Kubernetes - Terraform and infrastructure as code experience - Integration work against REST APIs, handling authentication, pagination and rate limiting - Python scripting for ingestion and automation tasks - Eligibility to work in Department of Defense Impact Level 4 or higher cloud service environments

Stack: Elasticsearch, Elastic Cloud, ECK, Kubernetes, Helm, Terraform, Python, GitHub, GitHub Actions, GCP, REST APIs