Lead endpoint security research at Elastic by analyzing emerging threats and building protections with C, C++, and Python across platforms.
As a Senior Security Research Engineer, you will help develop Elastic Defend’s visibility and prevention capabilities. You will collaborate with researchers, data scientists, and engineers while studying attacker techniques, reverse engineering malware, and strengthening endpoint defenses. The work spans Windows, macOS, and Linux.
Key Responsibilities: Research attacker techniques and turn findings into shipped protections
Instrument endpoint events across Windows, macOS, and Linux
Develop performant production code in C and C++
Reverse engineer malware and study security-control evasion
Investigate telemetry,
false positives, and performance regressions
Requirements: 6+ years analyzing attacker tactics, techniques, and procedures
6+ years developing security software with C, C++, and Python
Deep Windows operating-system internals knowledge
Reverse engineering and malware analysis experience
Ability to use AI for development, debugging, and optimization
Bring adversarial research, malware analysis, and production engineering expertise to strengthen Elastic Defend endpoint protections worldwide.