Security Analytics - Senior Software Engineer, Rule Management

About the Role:

The Security Detection Rule Management team is building detection and alerting features that are at the core of the Elastic Security product. The Elastic stack is widely used among the security analyst community and detection engineers, and our team is working to improve the workflows and user experience of these users.

In this role, you will be solving the broad problem of detecting suspicious events and triggering alerts based on them. Specifically, you will be focused on improving the user experience of managing detection rules, monitoring their health and performance, distributing prebuilt rules created by security experts internally at Elastic, customizing prebuilt rules and resolving conflicts via an automated diff/merge strategy, improving these workflows with Generative AI, and making sure all that works at scale.

The team is diverse and distributed. You will be working remotely with people from Germany, Netherlands, Spain, United States, United Kingdom, and more. We meet via Zoom, brainstorm in Google Docs, plan and discuss in public GitHub issues, and chat on Slack.

What You Will Be Doing:

• Write, test and maintain high-quality client-side and server-side TypeScript code.
• Build features and UI workflows that serve detection engineering use cases.
• Create Node.js APIs and background tasks that do data searches and manipulations.
• Create dev tools that might help us improve our development process.
• Work on open-source, contribute to the Kibana codebase and issues, communicate with the Elastic community via GitHub, Slack, and discussion forums.
• Work with our support team to help customers answer questions and resolve issues.

What You Bring Along:

• Experience in developing reasonably complex software with high quality over multiple years, as well as maintaining it in production environments. Large scale is a plus.
• Experience in TypeScript, React, Node.js.
• Experience in Elasticsearch and the Elastic stack is a plus.
• Hands-on experience in writing robust unit, integration, and E2E tests.
• Focus on quality. You are a great code reviewer and you often find bugs and suggest UX improvements when reviewing or testing other people’s work. You care how the software is designed.
• Ability to work autonomously in a distributed team throughout the world. You’re great at driving projects without much guidance. You effectively use many async and sync communication methods and tools to make it clear and transparent for your team and stakeholders.