Senior Information Security Infrastructure Engineer (Security Architecture - Information Security)

Join our InfoSec - Security Architecture team as a Senior Information Security Infrastructure Engineer. In this role, you will be responsible for ingesting security telemetry into Elasticsearch, maintaining the health of Elastic clusters, and managing cloud infrastructure using Terraform. You will also focus on data quality and reliability, ensuring that security data is flowing correctly. This position offers flexible location and schedule, fully paid health coverage, generous vacation days, and other benefits.

Responsibilities

• Ingest security telemetry into Elasticsearch consistently and maintain the underlying Elastic clusters.
• Build and maintain ingestion of security-relevant data into Elasticsearch, integrating with third-party and cloud provider APIs.
• Monitor and upgrade Elastic Cloud on Kubernetes clusters regularly, managing capacity and shards.
• Proven track record of using AI to accelerate development, debug complex systems, and accelerate operations, while still owning the final outcomes
• Terraform – managing cloud and Elasticsearch resources as code
• Knowledge of GitHub, PR-based workflows, GitHub Actions and Continuous Integration (CI)
• Knowledge of SOC operations and incident response (IR) workflows, including the use of security telemetry during investigations

Requirements

• Eligibility to work in Department of Defense (DoD) Impact Level 4 or above cloud service environments
• Python scripting – able to read, write, and modify ingestion/automation scripts. Scripting-level, not full software-engineering depth
• Ability to operate Elastic and Elasticsearch in production. This includes managing ingest pipelines, index templates, mappings, and queries, while ensuring that clusters are healthy and upgraded. Experience with ECK or Elasticsearch on Kubernetes is strongly preferred
• API integration – consuming REST APIs for data ingestion: authentication, pagination, rate limiting concurrency, and error handling
• Kubernetes – deploying and operating workloads (scheduled jobs, Helm charts, operators); troubleshooting pods/jobs in a cluster
• Experience with cloud providers
• Hands-on experience with cloud providers, preferably GCP, and working with audit and logging data
• Ability to develop and use dashboard/visualization tools