Senior Information Security Infrastructure Engineer, Security Architecture

Elastic

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Posted
3 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

How this pay compares to similar roles

Similar $184k
$126k most similar roles pay here $226k

This listing doesn't post a salary. Most similar roles pay $151,475–$216,065.

Based on 240 similar postings.

Employer

About Elastic

Elastic is the company behind Elasticsearch and the Elastic Stack (Elasticsearch, Kibana, Beats, and Logstash). It sells search, observability, and security products built on that search engine, primarily through its Elastic Cloud managed service.

Elastic currently has 257 open roles on FindRole.

Listed pay typically runs $133,100–$203,500 across 90 roles with salary data.

Most-posted roles

View all roles at Elastic

At a glance

TL;DR · Senior Information Security Infrastructure Engineer, Security Architecture

Senior Information Security Infrastructure Engineer - Security Architecture - InfoSec joins the InfoSec - Security Architecture team to protect organizational data and systems. This role involves managing the end-to-end pipeline for security telemetry, ensuring consistent ingestion into Elasticsearch while maintaining the health of underlying Elastic clusters on Kubernetes. Key responsibilities include building ingest pipelines for cloud provider audit logs, identity activity, and endpoint data; managing capacity, shards, and index lifecycle management; and utilizing Terraform to manage infrastructure as code. The candidate will use Python for scripting, integrate with REST APIs, and leverage AI automation to reduce operational toil. Required skills include experience with Kubernetes, Helm, and Elasticsearch in production environments. This role addresses the technical challenge of ensuring data quality and reliability across security-relevant telemetry used by detection, incident response, and consulting teams.

What you'll do

  • Build and maintain ingestion pipelines for security data from cloud providers and third-party APIs into Elasticsearch.
  • Manage the health, upgrades, capacity, and shard management of Elastic Cloud on Kubernetes clusters.
  • Use Terraform to manage cloud infrastructure, pipeline configurations, index templates, and alerts as code.
  • Implement AI automation and tooling to reduce operational toil and create self-healing jobs.
  • Monitor data quality and reliability to ensure security telemetry flows correctly and remains consistent.
  • Manage the end-to-end lifecycle of security data from initial ingestion to consumption by detection and IR teams.
  • Develop Python scripts to automate data ingestion processes and internal operations.

What we're looking for

  • Ability to operate Elastic and Elasticsearch in production, including managing ingest pipelines, index templates, mappings, and queries.
  • Experience with ECK or Elasticsearch on Kubernetes (preferred).
  • Proven track record of using AI to accelerate development, debug systems, and automate operations.
  • Proficiency in Kubernetes for deploying workloads, managing Helm charts, and troubleshooting pods/jobs.
  • Proficiency in Terraform for managing cloud infrastructure and Elasticsearch resources as code.
  • Ability to consume REST APIs for data ingestion, including handling authentication, pagination, and rate limiting.
  • Ability to read, write, and modify Python scripts for automation and ingestion tasks.
  • Eligibility to work in Department of Defense (DoD) Impact Level 4 or above cloud service environments.

More like this

Similar roles

Cloud Engineer

Booz Allen Hamilton

Chantilly, VA 26 days ago $99,000$225,000
Kubernetes AWS Terraform Ansible Helm Prometheus Grafana ElasticSearch ArgoCD Python Golang Bash Groovy RKE2 Rancher Pulumi Crossplane Terragrunt Infrastructure as Code Linux
5+ yrs exp