Senior Manager, Endpoint Protections

Elastic; Norway; On-site; NOK 873,000 - 1,381,000; Full time

Benefits offered by this job

Health coverage

Flexible locations

Generous vacation days

Donation matching

Volunteer hours

Parental leave

Job summary

Elastic seeks a Senior Manager for the Security Endpoint Protections team. You will lead a globally distributed group focused on visibility, prevention, and on-device machine learning within Elastic Defend.

You’ll drive hiring, mentorship, and a culture of candid feedback while setting a clear technical direction. You will own the roadmap, balance performance and efficacy, and partner with product managers to deliver high-quality features on release timelines.

Qualifications

• Proven leadership of senior engineers in a globally distributed team.
• Hands-on security researcher background and ability to review designs and code.
• Deep operating system internals knowledge, especially Windows, with cross-OS awareness.
• Experience in reverse engineering and malware analysis to assess threats.
• Strong written and verbal communication for technical and executive audiences.
• Thrives in distributed, autonomous work environments with stakeholder collaboration.

Responsibilities

• Lead, mentor, and grow a world-class engineering team.
• Own the roadmap and drive delivery across endpoint visibility, prevention, and ML features.
• Connect team work to Elastic Security and product enhancements.
• Direct the team's machine learning direction and data quality work.
• Achieve cross-platform protection parity across Windows, macOS, and Linux.
• Represent the team externally at conferences and with customers.

Skills

People leadership

Security research

OS internals

Reverse engineering

Threat modeling

Technical communication

Tools

AI-assisted development tools

Job description

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 5...

What is The Role:

The Elastic Security Endpoint Protections team builds the visibility, prevention, and on-device machine learning capabilities at the core of Elastic Defend, our endpoint and SIEM security solution. We work in kernel and user mode across Windows, macOS, and Linux, against adversaries who study how to defeat what we build. Our work reaches the security community as well as the product, through original research and conference talks. We are looking for a Senior Manager who has done this work personally and can still review a design or write code. You will lead a globally distributed team and set the tone for a group that values candid feedback, collaborative learning, and mentorship.

What You Will Be Doing:

• Lead, mentor, and grow a world-class engineering team. Guide senior research engineers across endpoint internals, prevention engineering, and machine learning. Coach career development, deliver candid feedback, own the hiring pipeline, and set new engineers up to contribute quickly.
• Own the roadmap and drive delivery. Decide where to invest in new visibility and where to deepen existing protection engines, balancing efficacy, performance, and stability across millions of endpoints. Work with product managers to define requirements and land high-quality features on release timelines.
• Connect your team's work to the rest of Elastic Security. Every event source your team adds unlocks new detection and protection capabilities across the product. Invest in the joint planning, working relationships, and shared accountability that get your team's work into customers' hands.
• Direct the team's machine learning work. Set direction on model development, training data quality, and the telemetry features those models depend on, and connect that work to the broader machine learning strategy across Elastic Security.
• Drive cross-platform protection parity. Bring the depth Elastic has on Windows to macOS and Linux, keep the team ahead of new hardware architectures, and sustain the platform vendor relationships that give you early access to emerging operating system security APIs.
• Represent the team externally. Support your engineers in presenting at conferences and publishing on Elastic Security Labs, engage with customers and partners on protection capabilities, and be a credible voice for Elastic in the endpoint security community.

What You Bring:

• People-leadership experience managing senior technical individual contributors on a globally distributed team. You lead with curiosity rather than authority, actively solicit feedback, and have a track record of growing people, not just shipping releases.
• You have been a practitioner. Substantial hands-on experience as a security researcher before moving into leadership: analyzing attacker tactics, techniques, and procedures (TTPs), building the protections that counter them, and shipping into software that runs on customer machines at scale.
• Operating system internals knowledge, in both kernel and user mode, earned hands-on rather than through oversight, and deep enough to reason about undocumented behavior and challenge a design on its technical merits. Windows depth is what we need most, with macOS or Linux close behind.
• Hands-on reverse engineering and malware analysis experience. You have done this work yourself, and can still read a disassembly, assess a research finding on its merits, and judge which threats warrant investment.
• An adversarial instinct. You anticipate how a protection will be evaded before it ships, and hold the team to designing for resilience rather than for the proof of concept in front of them.
• Clear communication skills, comfortable writing for technical and executive audiences and distilling deeply technical work for non-expert stakeholders.
• Motivation to thrive in a distributed, autonomous environment, with a genuine passion for protecting customers from real-world adversaries.
• Demonstrated experience leveraging AI-assisted development tools to accelerate feature development, debug complex systems, and optimize existing codebases.
• You possess the ability to comfortably rotate across projects, collaborate across functions and teams, and seamlessly adapt to evolving team structures.

Bonus Points:

• Prior ownership of an EDR, EPP, or other endpoint security product.
• Personal research output: published vulnerabilities, patents, in-depth technical writing, or conference talks.
• Experience leading machine learning engineers working on security problems.
• Experience partnering with product engineering teams to take research prototypes through to GA release.
• Conference speaking experience (e.g., Black Hat, DEF CON, CODE BLUE, Virus Bulletin).
• Familiarity with the Elastic Stack (Elasticsearch, Kibana) and Elastic Security.

Additional Information - We Take Care of Our People:

As a distributed company, diversity drives our identity. Whether you’re looking to launch a new career or grow an existing one, Elastic is the type of company where you can balance great work with great life. Your age is only a number. It doesn’t matter if you’re just out of college or your children are; we need you for what you can do.

• Competitive pay based on the work you do here and not your previous salary
• Health coverage for you and your family in many locations
• Ability to craft your calendar with flexible locations and schedules for many roles
• Generous number of vacation days each year
• Increase your impact - We match up to $2000 (or local currency equivalent) for financial donations and service
• Up to 40 hours each year to use toward volunteer projects you love
• Embracing parenthood with a minimum of 16 weeks of parental leave

Security & Privacy Responsibilities:

Take ownership of protecting the confidentiality, integrity, and availability of organizational data and systems by following applicable privacy and security policies, standards, and procedures. Ensure that all individual contributions follow Elastic’s Secure Software Development Framework (SSDF). Proactively participate in mandatory role-based training to ensure personal technical execution consistently aligns with the highest standards of data protection, data privacy, and system resilience.

Different people approach problems differently. We need that. Elastic is an equal opportunity employer and is committed to creating an inclusive culture that celebrates different perspectives, experiences, and backgrounds. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, pregnancy, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, disability status, or any other basis protected by federal, state or local law, ordinance or regulation.

We welcome individuals with disabilities and strive to create an accessible and inclusive experience for all individuals. To request an accommodation during the application or the recruiting process, please email [e-mail]. We will reply to your request within 24 business hours of submission.

Applicants have rights under Federal Employment Laws and can view the following posters linked below:

Family and Medical Leave Act (FMLA) Poster

Equal Employment Opportunity (EEO) Poster

Employee Polygraph Protection Act (EPPA) Poster

Please see here for our Privacy Statement.

Compensation for this role is in the form of base salary. This role does not have a variable compensation component.

At Elastic, our compensation philosophy aims to provide fair, competitive and transparent remuneration. Salary ranges are established based on a combination of external market benchmarks, internal pay equity considerations, and the responsibilities and complexity associated with each role. This approach helps ensure consistency across comparable roles while remaining competitive within the relevant labour markets.

The typical starting salary range for this role is: €80.400—€127.200 EUR

Different people approach problems differently. We need that. Elastic is an equal opportunity/affirmative action employer committed to diversity, equity, and inclusion. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, pregnancy, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, disability status, or any other basis protected by federal, state or local law, ordinance or regulation.

We welcome individuals with disabilities and strive to create an accessible and inclusive experience for all individuals. To request an accommodation during the application or the recruiting process, please email [e-mail] We will reply to your request within 24 business hours of submission.

Applicants have rights under Federal Employment Laws, view posters linked below:

Family and Medical Leave Act (FMLA) Poster; Equal Employment Opportunity (EEO) Poster; and Employee Polygraph Protection Act (EPPA) Poster.

Please see here for our Privacy Statement.