Senior Security Research Engineer — Endpoint Protection

Elastic; United Kingdom; Remote; GBP 99,000 - 189,000; Full time

Benefits offered by this job

Health coverage for you and family

Flexible locations & schedules

Generous vacation days

Volunteer time off

Parental leave

Job summary

Elastic is seeking a Senior Security Research Engineer to lead the development of innovative endpoint protections within Elastic Defend. You will analyze attacker techniques, build detections, and extend visibility across Windows, macOS, and Linux while collaborating with a distributed team of researchers, data scientists, and engineers.

You will own end-to-end efficacy, review telemetry at fleet scale, and mentor engineers across regions, contributing to research published in Elastic Security

Qualifications

• 6+ years of experience analyzing attacker TTPs and building detection methods for real threats.
• 6+ years of development in C, C++, and Python for security-critical code.
• Deep OS internals knowledge (Windows/macOS/Linux).
• Reverse engineering and malware analysis experience.

Responsibilities

• Research attacker techniques and translate them into protections.
• Extend endpoint visibility across Windows, macOS, and Linux.
• Develop production C/C++ code for millions of endpoints.
• Reverse engineer malware and study evasion techniques.
• Review telemetry, investigate false positives, and drive mitigation strategies.
• Extend protection parity across platforms and architectures.
• Collaborate with Elastic Security teams across time zones.
• Lead technical direction and mentor engineers.

Skills

Security research

C/C++

Python

Reverse engineering

OS internals

Adversarial thinking

Team collaboration

AI-assisted development

Autonomous work

Communication

Job description

Elastic is seeking a Senior Security Research Engineer to lead the development of innovative endpoint protections within Elastic Defend. You will analyze attacker techniques, build detections, and extend visibility across Windows, macOS, and Linux while collaborating with a distributed team of researchers, data scientists, and engineers.

You will own end-to-end efficacy, review telemetry at fleet scale, and mentor engineers across regions, contributing to research published in Elastic Security