Software Engineer

Who you are

• At least 3 years of web development experience, with a focus on secure development practices
• Strong knowledge of web application security principles including OWASP Top 10, secure authentication patterns, and defense-in-depth strategies
• Experience with security vulnerability management, including triage, remediation, and coordinated disclosure
• Proficiency with JavaScript, TypeScript, and Node.js
• Familiarity with security scanning tools and vulnerability management platforms (e.g., Snyk, CodeQL, HackerOne)
• Ability to work and communicate effectively with a worldwide team in a distributed work environment
• Hands-on experience implementing and maintaining content security policies, CORS policies, and other browser security controls
• Understanding of single-sign-on technologies, role-based access control, and identity management protocols

What the job involves

• H2O.ai is seeking a Vice President of Partnerships, North America to build and scale a high-impact partner ecosystem that accelerates enterprise and public sector growth
• This role owns the North America partner strategy, execution, and revenue outcomes across hyperscalers, OEMs, data platforms, GSIs, distributors, resellers, and services partners
• This position will report directly to the President and CRO
• You'll lead security hardening efforts across Kibana's codebase and infrastructure, including content security policy implementation and enforcement
• Build AI-powered tools and workflows to enhance security operations, including automated vulnerability detection, intelligent security alert triage, and predictive threat analysis
• Manage third-party dependency security through regular audits, vulnerability assessments, and coordinated upgrades
• Collaborate with security researchers and respond to vulnerability reports with urgency and thoroughness
• Design and implement security controls for authentication, authorization, and auditing features
• Work closely with Operations and Engineering teams to ensure security best practices across our hosted and on-premise offerings
• Contribute to threat modeling and security architecture decisions for new features
• Write secure, maintainable code for both client and server-side components
• Security & Privacy Responsibilities: Take ownership of protecting the confidentiality, integrity, and availability of organizational data and systems by following applicable privacy and security policies, standards, and procedures
• Ensure that all individual contributions follow Elastic’s Secure Software Development Framework (SSDF)
• Proactively participate in mandatory role-based training to ensure personal technical execution consistently aligns with the highest standards of data protection, data privacy, and system resilience

Benefits

• Toast to your health: Fully paid health coverage for you and your family, in many locations.
• Craft your calendar: Flexible location and schedule for most roles.
• Create space for you: Distributed by design workforce, plus generous number of vacation days each year.
• Embrace parenthood: Minimum of 16 weeks of parental leave, plus generous family formation benefits.
• Give back your time: 40 hours each year to use toward volunteering with organizations and causes you’re passionate about.
• Amplify your impact: Double your charitable giving — we match donations up to $1500 USD (or local currency equivalent).