Senior Security Research Engineer — Endpoint Protections (Flexible)

Elastic; Norway; Hybrid; NOK 850,000 - 1,345,000; Full time

Benefits offered by this job

Health coverage

Flexible locations & schedules

Generous vacation days

Donation matching

Job summary

Elastic is seeking a Senior Security Research Engineer to lead advanced protections for Elastic Defend. You will research attacker techniques, implement production-grade endpoint protections, and extend telemetry across Windows, macOS, and Linux.

The role demands deep OS knowledge, strong C/C++ and Python skills, and a collaborative, distributed-team mindset. You will work with researchers, data scientists, and engineers to design and ship features that withstand evolving threats.

Qualifications

• 6+ years of professional experience analyzing attacker tactics, techniques, and procedures (TTPs) and building detection methods for real security threats.
• 6+ years of development experience in C, C++, and Python, with fast, safe, and maintainable code in a security-critical codebase.
• Deep OS internals knowledge, kernel and user mode, Windows-focused with macOS/Linux depth.
• Reverse engineering and malware analysis experience with tooling to read binaries.

Responsibilities

• Research attacker techniques and translate into shipped protections across Windows, macOS, and Linux.
• Extend endpoint visibility by instrumenting new event sources and deepening telemetry.
• Develop production code in C/C++ that runs on millions of endpoints with performance in mind.
• Reverse engineer malware and study evasion to inform protections.
• Own efficacy end-to-end by reviewing telemetry, investigating false positives, and addressing performance issues.
• Extend protection parity across platforms and architectures.
• Collaborate with Elastic Security peers across countries and time zones.

Skills

C/C++

Python

Kernel/user mode

Reverse engineering

Threat research

Team collaboration

AI in development

Async communication

Tools

C

C++

Python

Job description

Elastic is seeking a Senior Security Research Engineer to lead advanced protections for Elastic Defend. You will research attacker techniques, implement production-grade endpoint protections, and extend telemetry across Windows, macOS, and Linux.

The role demands deep OS knowledge, strong C/C++ and Python skills, and a collaborative, distributed-team mindset. You will work with researchers, data scientists, and engineers to design and ship features that withstand evolving threats.