VP, Threat Research - Security Intelligence

The role

The VP of Threat Research will own the research agenda for what the platform detects, prevents, and publishes. This senior individual contributor leadership role involves setting priorities across detection engineering, threat research, endpoint protections, and security ML while serving as a public voice for the organization.

What you will do

• Define the research and detection agenda across SIEM, endpoint, threat research, and security ML
• Set the quality bar for what Elastic detects, prevents, and publishes
• Decide where the team should invest next across malware detection, ransomware and memory protections, and AI-driven security capabilities
• Shape the publishing strategy for Elastic Security Labs
• Act as the external face of the organization with customers, analysts, press, and the security community
• Partner with engineering, product, and delivery leadership to turn research priorities into shipped protections
• Help advance Elastic’s point of view on open and transparent security
• Lead thinking on how AI changes both threat research and attacker behavior

Required qualifications

• Deep credibility in threat research, detection engineering, endpoint security, or security ML
• Hands-on technical experience doing the work yourself
• Ability to operate as a senior IC leader who sets direction through technical depth and strong judgment
• Strong public communication skills and enthusiasm for customer engagement, speaking, and industry visibility
• Clear belief in open, transparent security and the value of publishing detections and research openly
• Strong judgment and the ability to lead through influence, expertise, and vision
• Experience setting strategy across technical security domains and translating that into clear priorities
• Thoughtful point of view on AI in security, including both its promise and its risks
• Willingness to travel regularly for customer meetings, conferences, and external engagements

Nice to have

• Experience leading or contributing to publicly recognized threat research or detection content
• Familiarity with open detection ecosystems, GitHub-based research workflows, or community-driven security programs
• Experience spanning both endpoint protections and SIEM detections
• Background working with malware models, behavioral detections, or small language models in security use cases
• Existing presence in the security community through talks, publications, or media engagement

Benefits

• Eligible to participate in Elastic's stock program
• Company-matched Registered Retirement Savings Plan (RRSP) with dollar-for-dollar matching up to 6% of eligible earnings
• Competitive pay based on the work you do here and not your previous salary
• Health coverage for you and your family in many locations
• Ability to craft your calendar with flexible locations and schedules for many roles
• Generous number of vacation days each year
• Match up to $2000 (or local currency equivalent) for financial donations and service
• Up to 40 hours each year to use toward volunteer projects you love
• Minimum of 16 weeks of parental leave

Before you apply

• An export license may be required if you are located in or are a national of Belarus, Cuba, Iran, North Korea, Russia, Syria, the Crimea Region of Ukraine, the Donetsk People’s Republic (“DNR”), or th

About the company

Elastic, the Search AI Company, enables everyone to find the answers they need in real time using all their data at scale. The Elastic Search AI Platform is used by more than 50% of the Fortune 500.