Senior Endpoint Security Research Engineer

Elastic; United Kingdom; On-site; GBP 90,000 - 150,000; Full time

Job summary

Elastic is hiring a Senior Security Research Engineer to lead the development of endpoint protections across Windows, macOS, and Linux. You will research attacker techniques, implement production-grade C/C++ code, and extend telemetry to improve detection and prevention across millions of endpoints.

You will collaborate with a diverse team of researchers, data scientists, and engineers, mentoring others and contributing to Elastic Security Labs.

Qualifications

• 6+ years of experience analyzing attacker TTPs and building detection methods for real threats.
• 6+ years of development experience in C, C++, and Python for security‑critical codebases.
• Deep OS internals knowledge (Windows focus, macOS/Linux depth second).
• Reverse engineering and malware analysis experience with related tooling.
• An adversarial mindset focused on resilience of protections.
• Collaborative mindset with ability to learn new skills and platforms.
• Proven ability to leverage AI to accelerate development.
• Autonomous and capable of driving decisions in a distributed team.
• Passion for protecting data from attack.

Responsibilities

• Research attacker techniques and turn them into shipped protections.
• Build and extend endpoint visibility across Windows, macOS, and Linux.
• Develop production C/C++ code that runs on millions of endpoints.
• Reverse engineer malware and study evasion to inform protections.
• Own efficacy end to end: review telemetry, investigate false positives, mitigate issues.
• Extend protection parity across platforms and new hardware architectures.
• Collaborate across Elastic Security with engineers, researchers, and data scientists.
• Mentor engineers and contribute to design and code reviews.

Skills

C/C++ development

Python development

Reverse engineering

Security research

Threat modeling

OS internals

AI-assisted development

Distributed teamwork

Communication

Tools

Elastic Stack

Kernel debugging tools

Job description

Elastic is hiring a Senior Security Research Engineer to lead the development of endpoint protections across Windows, macOS, and Linux. You will research attacker techniques, implement production-grade C/C++ code, and extend telemetry to improve detection and prevention across millions of endpoints.

You will collaborate with a diverse team of researchers, data scientists, and engineers, mentoring others and contributing to Elastic Security Labs.