VP, Threat Research - Security Intelligence

The role

The VP of Threat Research will own the research agenda for what the platform detects, prevents, and publishes. This senior individual contributor role involves setting priorities across detection engineering, threat research, endpoint protections, and security ML while serving as a public voice for the organization.

What you will do

• Define the research and detection agenda across SIEM, endpoint, threat research, and security ML
• Set the quality bar for what Elastic detects, prevents, and publishes
• Decide where the team should invest next across malware detection, ransomware and memory protections, and AI-driven security capabilities
• Shape the publishing strategy for Elastic Security Labs
• Act as the external face of the organization with customers, analysts, press, and the security community
• Partner with engineering, product, and delivery leadership to turn research priorities into shipped protections
• Help advance Elastic’s point of view on open and transparent security
• Lead thinking on how AI changes both threat research and attacker behavior

Required qualifications

• Deep credibility in threat research, detection engineering, endpoint security, or security ML
• Hands-on technical experience doing the work yourself
• Ability to operate as a senior IC leader who sets direction through technical depth and strong judgment
• Strong public communication skills
• Enthusiasm for customer engagement, speaking, and industry visibility
• Clear belief in open, transparent security and the value of publishing detections and research openly
• Strong judgment and the ability to lead through influence, expertise, and vision
• Experience setting strategy across technical security domains and translating that into clear priorities
• Thoughtful point of view on AI in security
• Willingness to travel regularly

Nice to have

• Experience leading or contributing to publicly recognized threat research or detection content
• Familiarity with open detection ecosystems, GitHub-based research workflows, or community-driven security programs
• Experience spanning both endpoint protections and SIEM detections
• Background working with malware models, behavioral detections, or small language models in security use cases
• Existing presence in the security community through talks, publications, or media engagement

Benefits

• Stock program eligibility
• Company-matched 401k with dollar-for-dollar matching up to 6% of eligible earnings
• Health coverage for you and your family in many locations
• Flexible locations and schedules for many roles
• Generous number of vacation days each year
• Match up to $2000 for financial donations and service
• Up to 40 hours each year to use toward volunteer projects
• Minimum of 16 weeks of parental leave

Before you apply

• An export license may be required if you are located in or are a national of Belarus, Cuba, Iran, North Korea, Russia, Syria, the Crimea Region of Ukraine, the Donetsk People’s Republic (“DNR”), or th

About the company

Elastic is the Search AI Company that enables everyone to find answers in real time using all their data at scale. The Elastic Search AI Platform is used by more than 50% of the Fortune 500.