About the job
Join Elastic, a leader in Search AI, where we empower organizations to unlock the full potential of their data and drive real-time insights at scale. Our Elastic Search AI Platform is trusted by over 50% of the Fortune 500, merging the accuracy of search with the intelligence of AI to accelerate critical business outcomes. By enhancing the security of both structured and unstructured data, our comprehensive cloud solutions in search, security, and observability are designed to help organizations fulfill the promises of AI.
Role Overview
We are seeking a passionate Software Engineer focused on security to enhance Kibana's security framework and develop robust security features. You will play a vital role in fortifying Kibana against emerging threats, managing security vulnerabilities, and ensuring our applications uphold the highest security standards for enterprise and government clients. Your expertise in AI will be instrumental in creating innovative security tools that improve our vulnerability detection, automate security workflows, and expedite threat response. If you are committed to web application security and eager to protect critical infrastructures with AI-driven solutions, we want to hear from you.
Key Responsibilities
- Lead security enhancement initiatives across Kibana's codebase and infrastructure, focusing on content security policy implementation and enforcement.
- Develop AI-driven tools and workflows to optimize security operations, including automated vulnerability detection, intelligent security alert triage, and predictive threat analysis.
- Oversee third-party dependency security through regular audits, vulnerability assessments, and coordinated upgrades.
- Collaborate with security researchers to address vulnerability reports with urgency and detail.
- Design and implement security controls for authentication, authorization, and auditing features.
- Work closely with Operations and Engineering teams to promote security best practices across hosted and on-premise solutions.
- Contribute to threat modeling and security architecture discussions for new features.
- Write secure, maintainable code for both client and server-side components.

