Senior Endpoint Security Research Engineer

Elastic; Norway; On-site; NOK 1,246,000 - 1,972,000; Full time

Benefits offered by this job

Health coverage

Flexible work locations

Generous vacation days

Volunteer time allowance

Parental leave

Donation-matching

Job summary

Elastic is seeking a Senior Security Research Engineer to lead development of innovative protections for the Elastic Defend endpoint and SIEM solution. You will work with a diverse team across countries, turning attacker techniques into real protections and expanding telemetry across Windows, macOS, and Linux.

You will write high-performance C/C++ code, reverse engineer malware, and design robust protections with an adversarial mindset.

Qualifications

• 6+ years of experience analyzing attacker TTPs and building detection methods for real threats.
• 6+ years in C, C++, and Python, writing safe, fast security-critical code.
• Deep OS internals knowledge, kernel and user mode, Windows depth preferred.
• In-depth reverse engineering and malware analysis experience.
• Adversarial mindset to anticipate evasion before ship.
• Collaborative mentality and eagerness to learn new platforms and technologies.
• Proven track record of using AI to accelerate development and debugging while owning outcomes.
• Ability to drive decisions in a distributed team via asynchronous, direct communication.

Responsibilities

• Research attacker techniques and translate them into shipped protections across Windows, macOS, and Linux.
• Extend endpoint visibility by instrumenting new event sources and deepening telemetry.
• Develop production C/C++ code that runs on millions of endpoints with performance in mind.
• Reverse engineer malware and study evasion to inform protections.
• Own efficacy end-to-end: analyze telemetry, investigate false positives and performance, define mitigations.
• Extend protection parity across platforms and support new hardware architectures.

Skills

Security research

C/C++

Python

OS internals

Reverse engineering

Threat detection

AI integration

Distributed teamwork

Asynchronous communication

Tools

Elastic Stack

Windows

Linux

macOS

Job description

Elastic is seeking a Senior Security Research Engineer to lead development of innovative protections for the Elastic Defend endpoint and SIEM solution. You will work with a diverse team across countries, turning attacker techniques into real protections and expanding telemetry across Windows, macOS, and Linux.

You will write high-performance C/C++ code, reverse engineer malware, and design robust protections with an adversarial mindset.