Senior Security Research Engineer

The role

You will research emerging attacker techniques and build protections for the Elastic Defend endpoint and SIEM security solution. You will develop performant C/C++ code, extend endpoint visibility across Windows, macOS, and Linux, and reverse engineer malware.

What you will do

• Research emerging attacker techniques and turn them into shipped protections
• Build and extend endpoint visibility across Windows, macOS, and Linux
• Develop performant, stable C/C++ production code
• Reverse engineer malware and study evasion
• Review customer telemetry at fleet scale and investigate false positives
• Extend protection parity across platforms
• Collaborate across Elastic Security with researchers and engineers
• Lead technical direction and mentor engineers
• Publish and present research

Required qualifications

• 6+ years of professional experience analyzing attacker TTPs and building detection methods
• 6+ years of development experience in C, C++, and Python
• Deep operating system internals knowledge in kernel and user mode
• In-depth reverse engineering and malware analysis experience
• Comfort with tooling that makes hard binaries readable
• An adversarial instinct
• A collaborative mentality and eagerness to learn new skills
• Proven track record of using AI to accelerate development, debug systems, and optimize code
• Ability to work autonomously in a distributed team

Nice to have

• Vulnerability research and exploit development
• Red teaming experience or background in building offensive tooling
• Kernel-mode development, including driver development and debugging
• Ownership or long-term maintenance of an open-source security tool
• Conference speaking experience or established publication record
• Experience applying machine learning to endpoint security problems
• Familiarity with the Elastic Stack (Elasticsearch, Kibana) and Elastic Security

Benefits

• Competitive pay
• Health coverage for you and your family in many locations
• Ability to craft your calendar with flexible locations and schedules
• Generous number of vacation days each year
• Match up to $2000 for financial donations and service
• Up to 40 hours each year to use toward volunteer projects
• Minimum of 16 weeks of parental leave

Before you apply

• An export license may be required if you are located in or are a national of Belarus, Cuba, Iran, North Korea, Russia, Syria, the Crimea Region of Ukraine, the Donetsk People’s Republic (DNR), or the

About the company

Elastic is a Search AI Company that provides cloud-based solutions for search, security, and observability. The Elastic Search AI Platform is used by more than 50% of the Fortune 500.