InfoSec Analyst - Business Enablement

About the role

Elastic is hiring an InfoSec Analyst for its Business Enablement team within Information Security, which manages the company's security strategy, policy and programs, including risk management, compliance, security controls, threat prevention and detection and incident response. The role supports security requests and vulnerability work coming through the team's queues, works closely with Sales, Solution Architects, Support, Legal, Engineering and other InfoSec teams, and uses AI and automation to speed up the work.

Key responsibilities

• Handle customer security requests such as RFPs, RFIs, security questionnaires and due diligence, routing questions needing other teams' expertise to the right owners.
• Own the Trust Center: keep customer-facing security documentation, certifications, attestations, policies and other materials accurate, up-to-date and easy to navigate.
• Analyze customer inquiries to spot recurring questions and gaps, and turn them into proposed updates to the Trust Center and customer artifacts.
• Triage the internal request queue, including product security tickets and CVE-related requests.
• Design and build AI-assisted workflows, automation and process improvements focused on speed, scalability and self-service.
• Explain Elastic's security posture and compliance (SOC 2, ISO 27001, FedRAMP, CSA STAR) clearly to customers and internal teams.
• Provide security policy guidance to employees, collaborators and partners.

Required profile

• Experience in security GRC, customer trust, security assurance or a similar function, including answering security questionnaires, RFPs or due diligence requests.
• Excellent written and spoken English, able to turn technical detail into clear, customer-ready content.
• Experience with fast-paced engineering and product teams, and comfort with ambiguity and change.

Required skills

• Working knowledge of security domains and frameworks such as ISO 27001, SOC 2, NIST and GDPR.
• Familiarity with vulnerability management concepts such as CVEs and severity scoring, or willingness to learn them quickly.
• Automation-first mindset and comfort using AI tools in daily work.

Bonus points

• Track record of improving processes through automation, including AI prompts, agentic workflows and API integrations.
• Building your own agents and tools (Python scripting welcome but not required).
• Certifications such as CISA, CISM or GIAC.
• Experience with government or regulated customers, or with the Elastic Stack.

Compensation is a base salary only, with no variable component; the typical starting range is EUR 46,500 to EUR 73,600. Benefits include health coverage, flexible scheduling, generous vacation days, a parental leave of at least 16 weeks and volunteer matching.