AI-Driven Security EDR Engineer — Defend Workflows

Elastic; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Health coverage for you and family

Flexible location & schedule

Generous vacation days

Parental leave (16+ weeks)

Volunteer hours (40 per year)

Charitable donation matching up to $1,

Job summary

Elastic is seeking a Software Engineer for the Security EDR Workflows team to build workflows and user-facing capabilities powering Elastic Defend management. You will collaborate with security engineering, product, and design to deliver robust, high-scale features used by security practitioners globally.

You will write production-grade TypeScript/Node.js code, contribute to architecture, and work with OSQuery-based forensics capabilities within Kibana.

Qualifications

• Basic knowledge of Node.js and React.js; Typescript is a plus.
• An AI-powered development mindset and initiative-taking attitude.
• Curious, collaborative, and able to work across time zones and teams.
• Experience in cybersecurity and forensics; knowledge of Elastic stack is a plus.
• Open-source contribution experience is a plus.

Responsibilities

• Build workflows and user-facing capabilities for Elastic Defend agent.
• Implement features powering Elastic Defend UI across Kibana perspective.
• Contribute to architecture of Elastic Defend management and response actions with OSQuery forensics.
• Develop scalable, high-performance systems within Elastic ecosystem.
• Write production-grade code in Typescript/Node.js and participate in code reviews.
• Collaborate with multiple Elastic engineering teams on cross-team projects.

Skills

Node.js

Typescript

React.js

AI mindset

Team collaboration

Security/forensics knowledge

Tools

OSQuery

Job description

Elastic is seeking a Software Engineer for the Security EDR Workflows team to build workflows and user-facing capabilities powering Elastic Defend management. You will collaborate with security engineering, product, and design to deliver robust, high-scale features used by security practitioners globally.

You will write production-grade TypeScript/Node.js code, contribute to architecture, and work with OSQuery-based forensics capabilities within Kibana.