Senior Information Security Infrastructure Engineer

Join the InfoSec - Security Architecture team as a Senior Information Security Infrastructure Engineer, where you'll play a key role in protecting our organization's data and systems. You will own the security telemetry pipeline end to end: from new security data sources landing, through ingest pipelines, into the indices that detection, IR, and consulting teams query, plus the clusters that store it all.

• Build and maintain ingestion of security-relevant data into Elasticsearch (cloud provider audit logs, identity/SaaS activity, endpoint and asset data), integrating with third-party and cloud provider APIs to pull telemetry: auth, pagination, rate limits, and handling schema changes.
• Keep the Elastic Cloud on Kubernetes clusters healthy: monitor and upgrade them regularly, manage capacity and shards, handle index lifecycle management (ILM), and enable cross-cluster search (CCS).
• Use Terraform to manage cloud infrastructure and Elasticsearch resources, including pipelines, index templates, and alerts.
• Utilize Kubernetes and Helm to deploy scheduled ingest jobs.
• Use AI automation and tooling to reduce toil, including self-healing jobs, health checks, alerting, internal CLIs, and AI or agent-assisted workflows for investigation and operations.
• Own data quality and reliability: monitor backfills, ensure schemas and fields are consistent, and keep an eye on costs.

• Ability to operate Elastic and Elasticsearch in production, including managing ingest pipelines, index templates, mappings, and queries, while ensuring clusters are healthy and upgraded.
• Experience with ECK or Elasticsearch on Kubernetes is strongly preferred.
• Proven track record of using AI to accelerate development, debug complex systems, and accelerate operations, while still owning the final outcomes.
• Kubernetes: deploying and operating workloads (scheduled jobs, Helm charts, operators); troubleshooting pods/jobs in a cluster.
• Terraform: managing cloud and Elasticsearch resources as code.
• API integration: consuming REST APIs for data ingestion: authentication, pagination, rate limiting concurrency, and error handling.
• Python scripting: able to read, write, and modify ingestion/automation scripts (scripting-level, not full software-engineering depth).
• Eligibility to work in Department of Defense (DoD) Impact Level 4 or above cloud service environments.

Compensation is in the form of base salary; this role does not have a variable compensation component. The typical starting salary range for this role is €61,100—€97,000 EUR.

Elastic offers competitive pay, health coverage for you and your family in many locations, flexible locations and schedules for many roles, generous vacation days, up to $2000 (or local currency equivalent) match for financial donations and service, up to 40 hours each year for volunteer projects, and a minimum of 16 weeks of parental leave.