InfoSec Analyst - Business Enablement

The role

You will handle customer security requests, manage the Trust Center, and design AI-assisted workflows. You will support security requests and vulnerability work to maintain customer trust.

What you will do

• Handle customer security requests such as RFPs, RFIs, security questionnaires and due diligence.
• Route questions that need other teams' expertise to the right owners.
• Own the Trust Center and ensure security documentation is accurate and up-to-date.
• Analyze incoming customer inquiries to propose updates to the Trust Center and customer artifacts.
• Triage the team's internal request queue, including product security-related tickets and CVE-related requests.
• Design and build AI-assisted workflows, automation and process improvements.
• Explain Elastic's security posture and compliance to customers and internal teams.
• Provide security policy guidance to employees, collaborators and partners.
• Balance day-to-day operational work with project and creative work.

Required qualifications

• Experience in security GRC, customer trust, security assurance or a similar function, including answering security questionnaires, RFPs or due diligence requests.
• Working knowledge of security domains and frameworks (e.g., ISO 27001, SOC 2, NIST, GDPR).
• Ability to discuss technical topics with engineers and domain experts.
• An automation-first mindset.
• Comfort using AI tools in your day-to-day work.
• Familiarity with vulnerability management concepts such as CVEs and severity scoring, or the willingness to learn them quickly.
• Excellent written and spoken English.
• Strong attention to detail.
• Data-driven approach.
• Comfort with deadlines and shifting priorities.
• Experience working with fast-paced engineering and product teams.
• Ability to pick up new technologies quickly.

Nice to have

• A track record of improving processes through automation, including using AI in smart, practical ways: well-crafted prompts, agentic workflows, API integrations.
• Building your own agents and tools (Python scripting is welcome, but not required).
• Certifications such as CISA, CISM or GIAC.
• Experience with government or other regulated customers.
• Experience with the Elastic Stack.

Benefits

• Competitive pay based on the work you do here and not your previous salary
• Health coverage for you and your family in many locations
• Ability to craft your calendar with flexible locations and schedules for many roles
• Generous number of vacation days each year
• We match up to $2000 (or local currency equivalent) for financial donations and service
• Up to 40 hours each year to use toward volunteer projects you love
• Minimum of 16 weeks of parental leave

Before you apply

• An export license may be required if you are located in or are a national of Belarus, Cuba, Iran, North Korea, Syria, or Russia, including the Ukrainian territories annexed by Russia (The Crimea regio

About the company

Elastic, the Search AI Company, enables everyone to find the answers they need in real time using all their data at scale. The Elastic Search AI Platform is used by more than 50% of the Fortune 500.