Principal Software Engineer, Security, Elasticsearch

Elastic

Confirmed live yesterday Trusted

Quick summary

Work type
On-site
Location
Salary
$159,800–$252,800 / yr
Posted
50 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $192k
This role $206k
$130k most similar roles pay here $266k

This role pays more than 52% of similar roles. Most pay $167,487–$217,500 — the shaded band above. At the midpoint, this role pays about $206k versus about $192k for comparable roles.

Based on 240 similar postings.

Employer

About Elastic

Elastic is the company behind Elasticsearch and the Elastic Stack (Elasticsearch, Kibana, Beats, and Logstash). It sells search, observability, and security products built on that search engine, primarily through its Elastic Cloud managed service.

Elastic currently has 240 open roles on FindRole.

Listed pay typically runs $133,100–$210,600 across 91 roles with salary data.

Most-posted roles

View all roles at Elastic

At a glance

TL;DR · Principal Software Engineer, Security, Elasticsearch

Principal Software Engineer - Security - Elasticsearch joins the Elasticsearch Security team to lead the architecture and design of core features including authentication, authorization, and tenant isolation. This role involves owning security initiatives from architecture to production, developing foundational models for complex features, and optimizing performance within distributed systems. The candidate will implement cryptographic solutions, manage identity protocols like OAuth 2.0 and SAML, and drive vulnerability management using AI-driven tools. Key technical requirements include deep knowledge of Java internals, JVM memory management, concurrency models, and high-performance, thread-safe coding. Experience with RBAC/ABAC models, token validation pipelines, and zero-trust transport is essential. The role addresses the challenge of providing robust data isolation and security at scale within a distributed data store environment while ensuring compliance with standards like FedRAMP and FIPS 140.

What does a Software Engineer earn?

Median $197500 from 2196 postings across 133 companies.

See salary data

What you'll do

  • Lead the architecture and design of core security features including authentication, authorization, and tenant isolation.
  • Own security initiatives from initial technical design through to production deployment in the Elasticsearch engine.
  • Develop foundational security models and optimize performance for distributed systems at scale.
  • Implement cryptographic solutions and manage identity protocols like OAuth 2.0 and SAML.
  • Ensure robust data isolation within shared infrastructure supporting multiple customers.
  • Drive vulnerability management by identifying, assessing, and remediating risks in collaboration with InfoSec teams.
  • Utilize AI-driven tools to automate the triage and investigation of security vulnerabilities.
  • Mentor and coach other engineers to foster a culture of technical excellence and security-first development.

What we're looking for

  • Deep knowledge of Java internals, JVM memory management, and high-performance, thread-safe, lock-free code.
  • Proven experience designing and building scalable authorization systems including RBAC/ABAC models and token validation pipelines.
  • Solid comprehension of distributed systems security, including zero-trust transport, partition tolerance, and cluster state propagation.
  • Deep knowledge of edge identity protocols such as OAuth 2.0 and SAML.
  • Proven track record of using AI to accelerate development, debug complex systems, and optimize code.
  • Ability to work autonomously and lead a distributed team through asynchronous and transparent communication.
  • Knowledge of cipher suites, TLS handshakes, PKI management, and Post-Quantum Cryptography (preferred).
  • Experience with data store internals or mapping technical controls to FedRAMP, FIPS 140, and SOC 2 (preferred).

More like this

Similar roles

Senior Software Developer, Security, Elasticsearch

Elastic

Remote (Canada) 50 days ago $128,300$203,000
Elasticsearch Java JVM Distributed Systems Cryptography OAuth 2.0 SAML TLS PKI Post-Quantum Cryptography FedRAMP FIPS 140 SOC 2 Identity Management Data Isolation
Remote