Senior Information Security Infrastructure Engineer (Security Architecture, Information Security)

Join our InfoSec - Security Architecture team as a Senior Information Security Infrastructure Engineer. In this role, you will be responsible for ingesting security telemetry into Elasticsearch, maintaining the health of Elastic clusters, managing cloud infrastructure with Terraform, and ensuring data quality and reliability. You will have the opportunity to work on meaningful projects that directly impact our security posture and collaborate with a skilled team passionate about information security.

• Ingest security telemetry into Elasticsearch consistently and maintain the underlying Elastic clusters.
• Build and maintain ingestion of security-relevant data into Elasticsearch, integrating with third-party and cloud provider APIs.
• Monitor and upgrade Elastic Cloud on Kubernetes clusters regularly, managing capacity and shards.

• Eligibility to work in Department of Defense (DoD) Impact Level 4 or above cloud service environments
• Ability to operate Elastic and Elasticsearch in production. This includes managing ingest pipelines, index templates, mappings, and queries, while ensuring that clusters are healthy and upgraded. Experience with ECK or Elasticsearch on Kubernetes is strongly preferred
• Terraform – managing cloud and Elasticsearch resources as code
• API integration – consuming REST APIs for data ingestion: authentication, pagination, rate limiting concurrency, and error handling
• Python scripting – able to read, write, and modify ingestion/automation scripts. Scripting-level, not full software-engineering depth
• Kubernetes – deploying and operating workloads (scheduled jobs, Helm charts, operators); troubleshooting pods/jobs in a cluster
• Proven track record of using AI to accelerate development, debug complex systems, and accelerate operations, while still owning the final outcomes
• Experience with cloud providers
• Knowledge of GitHub, PR-based workflows, GitHub Actions and Continuous Integration (CI)
• Hands-on experience with cloud providers, preferably GCP, and working with audit and logging data
• Knowledge of SOC operations and incident response (IR) workflows, including the use of security telemetry during investigations
• Ability to develop and use dashboard/visualization tools