{"id":583790,"url":"https://alion.io/job/elastic-dev-software-engineer-ii-edr-workflows-security","title":"Software Engineer II - EDR Workflows - Security","company":{"id":4819,"name":"Elastic","domain":"elastic.co","url":"https://alion.io/company/elastic","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":85,"open_postings":55,"ghost_share":0,"stale_share":0.618,"repost_share":0,"time_to_fill_p50_days":42,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Backend","role_family":"Backend","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":66000,"max_usd":150000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":25},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ElasticSearch","optional":false},{"name":"Kibana","optional":false},{"name":"Node JS","optional":false},{"name":"osquery","optional":false},{"name":"React.js","optional":false},{"name":"SIEM","optional":false},{"name":"TypeScript","optional":false},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-09-02T13:03:18Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-18T00:27:17Z","board_verified":true,"closed_at":null,"days_open":45,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":45},"description":"Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale - unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data - securing and protecting private information more effectively - Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI.\nWhat is The Role\nThe Security EDR Workflows team is in charge of building core capabilities that power Elastic Defend management experience. Our focus is on delivering policy configuration and management capabilities, Elastic Defend and third party providers response actions as forensics capabilities through OSquery. The team is leading XDR key expansion to our SIEM foundations and enhancing user experience in onboarding and managing our security product. As a Software Engineer on the Security EDR Workflows team, you will help build workflows and user-facing capabilities that get to our Elastic Defend agent to protect and respond against security threats. You’ll collaborate closely with other security engineering teams, as well as with product and design, to deliver robust, high-scale features used by security practitioners around the world. You’ll be using AI to quickly understand and solve problems.\nWhat You Will Be Doing\nYou’ll implement features that power Elastic Defend user interface capabilities.\n\nYou’ll contribute to the architecture of Elastic Defend management and response actions framework along with OSquery forensics capabilities.\n\nYou’ll develop scalable, high performance systems within the Elastic ecosystem.\n\nWrite production-grade code in Typescript/Node JS (and potentially other languages) as part of high-quality, well-tested codebase.\n\nYou’ll collaborate with other Elastic engineering teams when working on cross-team efforts.\n\nYou’ll be helping on engineering standards, tooling and team processes improvements driven by AI usage.\n\nYou’ll participate in code reviews.\n\nYou’ll work with a globally distributed team of skilled engineers focused on delivering Elastic Defend and OSquery capabilities from Kibana point of view.\n\nYou’ll collaborate with team members on large product features.\n\nYou’ll be using AI to supercharge development work.\n\nWhat You Bring \nYou have a basic knowledge of TNode JS and React JS skills. Typescript is a plus.\n\nYou take advantage of AI for better comprehension of complex problems and quickly ramping up into solutions.\n\nYou have an AI powered development mindset.\n\nYou are curious and want to engage in team meetings.\n\nComfortable developing collaboratively. Giving and receiving feedback on code and approaches, even asynchronous over different timezones.\n\nAn initiative-taking mindset: you ask the right questions, don't make assumptions, and look for ways to improve both product and engineering processes.\n\nBonus Points\nExperience and interest in contributing or developing open-source projects\n\nKnowledge of the Elastic stack and solutions\n\nExperience on cybersecurity and forensics.\n\nAdditional Information - We Take Care of Our People\nAs a distributed company, diversity drives our identity. Whether you’re looking to launch a new career or grow an existing one, Elastic is the type of company where you can balance great work with great life. Your age is only a number. It doesn’t matter if you’re just out of college or your children are; we need you for what you can do.\nWe strive to have parity of benefits across regions and while regulations differ from place to place, we believe taking care of our people is the right thing to do.\nCompetitive pay based on the work you do here and not your previous salary\nHealth coverage for you and your family in many locations\nAbility to craft your calendar with flexible locations and schedules for many roles\nGenerous number of vacation days each year\nIncrease your impact - We match up to $2000 (or local currency equivalent) for financial donations and service\nUp to 40 hours each year to use toward volunteer projects you love\nEmbracing parenthood with minimum of 16 weeks of parental leave\nDifferent people approach problems differently. We need that. Elastic is an equal opportunity employer and is committed to creating an inclusive culture that celebrates different perspectives, experiences, and backgrounds. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, pregnancy, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, disability status, or any other basis protected by federal, state or local law, ordinance or regulation.\nWe welcome individuals with disabilities and strive to create an accessible and inclusive experience for all individuals. To request an accommodation during the application or the recruiting process, please email . We will reply to your request within 24 business hours of submission.\nApplicants have rights under Federal Employment Laws, view posters linked below: Family and Medical Leave Act (FMLA) Poster; Pay Transparency Nondiscrimination Provision Poster; Employee Polygraph Protection Act (EPPA) Poster and Know Your Rights (Poster)\nElasticsearch develops and distributes technology and information that is subject to U.S. and other countries’ export controls and licensing requirements for individuals who are located in or are nationals of the following sanctioned countries and regions: Belarus, Cuba, Iran, North Korea, Syria, or Russia, including the Ukrainian territories annexed by Russia (The Crimea region of Ukraine, The Donetsk People's Republic (DNR), The Luhansk People's Republic (LNR), Kherson or Zaporizhzhia). If you are located in or are a national of one of the listed countries or regions, an export license may be required as a condition of your employment in this role. Please note that national origin and/or nationality do not affect eligibility for employment with Elastic.\nPlease see here for our Privacy Statement.","description_format":"text","description_chars":6310,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Parental leave"],"hiring_locations":[{"name":"Belarus","iso":"BY","kind":"country"},{"name":"Cuba","iso":"CU","kind":"country"},{"name":"Iran","iso":"IR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Security Operations","Vector Search & RAG","Observability & APM"],"lifecycle":[{"event":"open","at":"2026-09-10T00:59:52Z"},{"event":"open","at":"2026-09-27T23:56:55Z"},{"event":"open","at":"2026-10-03T00:40:44Z"}],"visa":[],"liveness":{"score":22,"band":"cold","label":"Long shot","p_open":1,"p_active":0.495,"p_room":0.44,"age_days":44,"expected_fill_days":42,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/elastic-dev-software-engineer-ii-edr-workflows-security","json_url":"https://alion.io/job/elastic-dev-software-engineer-ii-edr-workflows-security.json","meta":{"generated_at":"2026-10-18T01:20:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2239,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4819},"rest":"https://alion.io/mcp/rest/get_company?id=4819"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Felastic-dev-software-engineer-ii-edr-workflows-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Felastic-dev-software-engineer-ii-edr-workflows-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Felastic-dev-software-engineer-ii-edr-workflows-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/elastic-dev-software-engineer-ii-edr-workflows-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Felastic-dev-software-engineer-ii-edr-workflows-security"}]}