Technical Lead - Data Signals

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI.

What is The Role

We are looking for a Technical Lead to guide the technical direction of the Security Data Experience team and to extend that direction beyond the team. You will build and shape the capabilities and tools that simplify how security data is collected, processed, and experienced across different operational and analytical contexts—both when engineers build integrations and when teams analyze data to derive security insights. This role is about the end-to-end data experience: understanding developer and operational friction points across collection and data usage, and driving technical solutions that accelerate insights and improve developer productivity.

The Security Data Experience team owns tooling to support data telemetry pipelines, and data interpretation. That includes infrastructure and deployment tooling built on Terraform, telemetry pipelines running through BigQuery, and the AI-driven tools and evaluations used to interpret data and transform raw logs into actionable intelligence. As Technical Lead, you will set the technical strategy across these areas, break ambiguous problems into executable engineering initiatives, and drive end-to-end ownership of projects across data collection, telemetry, and AI-assisted data experiences.

This is fast-moving, often ambiguous work. We are looking for someone who is comfortable operating without a fixed spec, listens thoughtfully, and collaborates well across teams. You should drive toward outcomes while supporting your teammates, bring clear ideas on how data should be collected, structured, and presented, care deeply about the user and developer experience, and be equally comfortable working independently or alongside product teams and partners. You will be recognized as a technical authority beyond the team, using that standing to align data architecture, collection strategies, and standards across the Security, Ingest, and Analytics ecosystems.

Prior experience with the Elastic product suite isn't required, but it helps.

What you will be doing

• Set the technical direction for the Security Data Experience team, owning the overarching architecture, data collection workflows, and automation strategy while using Gen AI to solve complex data experience problems at scale
• Lead green-field initiatives that shape the future of multi-context data experiences, including multi-quarter, cross-team projects spanning integrations, and data presentation
• Identify the highest-value problems, break them into well-scoped work that other engineers can execute, and take full ownership of the outcome
• Make and document technical decisions, distinguishing one-way door decisions that need rigor from two-way door decisions that should move quickly
• Work with the Engineering Manager and Product Management to define and influence the team's roadmap and to plan and prioritize delivery
• Influence outside the team: align roadmaps, interfaces, and standards with the Security and Ingest teams and other engineering groups, resolve cross-team technical disagreements through discussion and compromise, and bring the needs of dependent teams back into the team's plans
• Represent the team in the open, working with Elastic users and the broader open source community to shape direction and build trust, including presenting to broad technical and non-technical audiences
• Set a collaborative tone for the team by fostering open communication, mutual respect, and thoughtful decision-making, and mentor engineers technically and in thinking about the whole product
• Take part in hiring, including interviewing and assessing senior candidates

What you bring

• Deep technical expertise in at least one area relevant to the team, with enough breadth to lead work across infrastructure, telemetry, and AI-assisted tooling, and recognition from engineers on multiple teams as an expert
• Experience building and running evals for AI systems at scale, with a strong sense of measuring output quality and catching regressions
• Strong proficiency in Python and Go, with hands-on Terraform for infrastructure and deployment, and BigQuery for telemetry and data analysis
• A record of designing, leading, and delivering solutions that span multiple quarters or multiple teams with little guidance, including planning and scoping the work yourself
• Proven ability to run projects end to end with autonomy, with the judgment to bring others along and seek input when needed
• Experience influencing technical direction and roadmaps beyond your own team, without relying on organizational authority
• A history of mentoring engineers and raising the quality bar for a team, and of presenting clearly to audiences with different levels of technical background

Nice to have

• Production experience with the general Elastic ingest model
• Experience in cybersecurity
• Experience parsing logs and events, ideally with exposure to OpenTelemetry, ECS, or OCSF in a security or observability context
• External visibility through open source contributions, conference talks, or technical writing

Additional Information - We Take Care of Our People

As a distributed company, diversity drives our identity. Whether you’re looking to launch a new career or grow an existing one, Elastic is the type of company where you can balance great work with great life. Your age is only a number. It doesn’t matter if you’re just out of college or your children are; we need you for what you can do.

We strive to have parity of benefits across regions and while regulations differ from place to place, we believe taking care of our people is the right thing to do.

• Competitive pay based on the work you do here and not your previous salary
• Health coverage for you and your family in many locations
• Ability to craft your calendar with flexible locations and schedules for many roles
• Generous number of vacation days each year
• Increase your impact - We match up to $2000 (or local currency equivalent) for financial donations and service
• Up to 40 hours each year to use toward volunteer projects you love
• Embracing parenthood with minimum of 16 weeks of parental leave

Different people approach problems differently. We need that. Elastic is an equal opportunity/affirmative action employer committed to diversity, equity, and inclusion. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, pregnancy, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, disability status, or any other basis protected by federal, state or local law, ordinance or regulation.

We welcome individuals with disabilities and strive to create an accessible and inclusive experience for all individuals. To request an accommodation during the application or the recruiting process, please email candidate_accessibility@elastic.co We will reply to your request within 24 business hours of submission.

Applicants have rights under Federal Employment Laws, view posters linked below: Family and Medical Leave Act (FMLA) Poster; Pay Transparency Nondiscrimination Provision Poster; Employee Polygraph Protection Act (EPPA) Poster and Know Your Rights (Poster)

Elasticsearch develops and distributes encryption software and technology that is subject to U.S. export controls and licensing requirements for individuals who are located in or are nationals of the following sanctioned countries and regions: Belarus, Cuba, Iran, North Korea, Russia, Syria, the Crimea Region of Ukraine, the Donetsk People’s Republic (“DNR”), and the Luhansk People’s Republic (“LNR”). If you are located in or are a national of one of the listed countries or regions, an export license may be required as a condition of your employment in this role. Please note that national origin and/or nationality do not affect eligibility for employment with Elastic.

Please see here for our Privacy Statement.