Senior Information Security Infrastructure Engineer (Security Architecture - InfoSec)

Join our InfoSec - Security Architecture team as a Senior Information Security Infrastructure Engineer. In this role, you will be responsible for ingesting security telemetry into Elasticsearch, maintaining the health of Elastic clusters, managing cloud infrastructure with Terraform, and ensuring data quality and reliability. You will have the opportunity to work on meaningful projects that directly impact our security posture and collaborate with a skilled team passionate about information security.

Responsibilities

• Ingest security telemetry into Elasticsearch consistently and maintain the underlying Elastic clusters.
• Build and maintain ingestion of security-relevant data into Elasticsearch, integrating with third-party and cloud provider APIs.
• Monitor and upgrade Elastic Cloud on Kubernetes clusters regularly, managing capacity and shards.
• API integration - consuming REST APIs for data ingestion: authentication, pagination, rate limiting concurrency, and error handling
• Ability to operate Elastic and Elasticsearch in production. This includes managing ingest pipelines, index templates, mappings, and queries, while ensuring that clusters are healthy and upgraded. Experience with ECK or Elasticsearch on Kubernetes is strongly preferred
• Kubernetes - deploying and operating workloads (scheduled jobs, Helm charts, operators); troubleshooting pods/jobs in a cluster
• Proven track record of using AI to accelerate development, debug complex systems, and accelerate operations, while still owning the final outcomes

Requirements

• Terraform - managing cloud and Elasticsearch resources as code
• Eligibility to work in Department of Defense (DoD) Impact Level 4 or above cloud service environments
• Python scripting - able to read, write, and modify ingestion/automation scripts. Scripting-level, not full software-engineering depth

Experience with cloud providers

• Hands-on experience with cloud providers, preferably GCP, and working with audit and logging data
• Knowledge of GitHub, PR-based workflows, GitHub Actions and Continuous Integration (CI)
• Ability to develop and use dashboard/visualization tools
• Knowledge of SOC operations and incident response (IR) workflows, including the use of security telemetry during investigations

Pay

EUR 67,000 - 106,000