Senior Malware & Threat Research Engineer

Elastic; United Kingdom; On-site; GBP 98,000 - 187,000; Full time

Benefits offered by this job

Health coverage

Flexible locations

Generous vacation days

Charitable donation matching

Volunteer hours

Parental leave

Job summary

Elastic Security is seeking a Senior Security Research Engineer to reverse engineer malware and drive protections across Windows, macOS, and Linux. You will work with global endpoint data, build scalable detection tooling, and publish analyses to Elastic Security Labs and GitHub.

You will collaborate across teams, mentor researchers, and help shape the team's technical direction while advancing the state of defense against adversaries.

Qualifications

• 6+ years of professional experience reverse engineering malware and researching adversary tradecraft
• Python development experience for research tooling and automation, plus reading C and C++
• YARA authorship and hunting at scale
• Windows and Linux internals, network protocols HTTP/TLS, and basic cryptography

Responsibilities

• Reverse engineer malware across Windows, macOS, and Linux to recover communication and persistence.
• Operate global data systems to surface threat activity from endpoint telemetry.
• Turn discoveries into protections and scalable tooling with signatures and automation.
• Publish research on Elastic Security Labs and public GitHub repositories; present at conferences.
• Collaborate with Elastic Security teams on threat intel and detection engineering projects.
• Lead investigations, raise the bar in reviews, and mentor junior researchers.

Skills

Malware RE

Python for tools

YARA signatures

Windows internals

Linux internals

Cryptography basics

Technical writing

AI-assisted development

Cross-team collaboration

Mentoring

Tools

GitHub

Elastic Stack

Job description

Elastic Security is seeking a Senior Security Research Engineer to reverse engineer malware and drive protections across Windows, macOS, and Linux. You will work with global endpoint data, build scalable detection tooling, and publish analyses to Elastic Security Labs and GitHub.

You will collaborate across teams, mentor researchers, and help shape the team's technical direction while advancing the state of defense against adversaries.