Senior Security Research Engineer: Adversary Intel & AI

Elastic; Poland; On-site; PLN 346,000 - 547,000; Full time

Benefits offered by this job

Health coverage

Flexible locations & schedules

Generous vacation

Donations matching up to 2000 USD

Volunteer hours (40h/year)

Parental leave (16 weeks)

Job summary

Elastic is seeking a Senior Security Research Engineer to tackle advanced malware analysis and adversary tradecraft across platforms. You will reverse engineer new threats, process data from millions of endpoints, and develop scalable protections with AI-assisted workflows.

Join a distributed team that values collaboration, mentorship, and public research, with opportunities to publish and present findings while shaping the technical direction of Elastic Security.

Qualifications

• 6+ years reverse engineering malware and researching adversary tradecraft across PE/ELF/Mach-O formats.
• Proficient in Python for research tooling; reading C/C++ as needed.
• YARA signatures and large-scale hunting experience.
• Strong understanding of Windows/Linux internals and network protocols.

Responsibilities

• Reverse engineer undocumented malware across Windows, macOS, Linux to map communication and configuration.
• Operate global data systems to surface threats from millions of endpoints.
• Create protections and scalable tooling; author detection signatures and automation.
• Publish research with Elastic Security Labs and share artifacts publicly.
• Collaborate with Elastic Security and other teams on threat intel projects.
• Mentor junior researchers and help set technical direction.

Skills

Reverse engineering

Malware analysis

Python development

C/C++ reading

YARA

Windows/Linux internals

AI-assisted tooling

Technical writing

Threat intelligence

Collaboration

Tools

Elastic Stack

GitHub/OSS

Rust/Go/NodeJS familiarity

Job description

Elastic is seeking a Senior Security Research Engineer to tackle advanced malware analysis and adversary tradecraft across platforms. You will reverse engineer new threats, process data from millions of endpoints, and develop scalable protections with AI-assisted workflows.

Join a distributed team that values collaboration, mentorship, and public research, with opportunities to publish and present findings while shaping the technical direction of Elastic Security.