Senior Endpoint Security Research Engineer

Elastic; Mountain View (CA); Hybrid; USD 133,000 - 211,000; Full time

Benefits offered by this job

Health coverage

Flexible locations

Generous vacation days

Volunteer time off

parental leave

Job summary

Elastic is seeking a Senior Security Research Engineer to help lead the development of advanced protections for Elastic Defend. You will research attacker techniques, extend endpoint visibility, and write high-performance C/C++ code that runs across millions of endpoints.

You will reverse engineer malware, study evasion, and drive end-to-end efficacy with telemetry feedback. You will collaborate with a distributed team of researchers, data scientists, and engineers, mentoring others, setting

Qualifications

• 6+ years of professional experience analyzing attacker tactics, techniques, and procedures (TTPs).
• 6+ years of development experience in C, C++, and Python in a security-critical codebase.
• Deep OS internals knowledge in kernel and user mode (Windows preferred).
• In-depth reverse engineering and malware analysis experience.
• Adversarial mindset to anticipate evasion techniques.
• Collaborative and autonomous with strong communication in a distributed team.

Responsibilities

• Research attacker techniques and translate into shipped protections.
• Extend endpoint visibility across Windows, macOS, Linux.
• Develop production code in C/C++ that runs at scale on endpoints.
• Reverse engineer malware and study evasion.
• Own efficacy end-to-end by reviewing telemetry and mitigating false positives.
• Extend protection parity across platforms and architectures.
• Collaborate with Elastic Security across multiple countries/time zones.
• Lead technical direction and mentor engineers early in their careers.
• Publish and present research through Elastic Security Labs and conferences.

Skills

Security research

C/C++

Python

OS internals

Reverse engineering

Adversarial mindset

Collaboration

AI in development

Telemetry/observability

Tools

C

C++

Python

Windows internals

Linux internals

Job description

Elastic is seeking a Senior Security Research Engineer to help lead the development of advanced protections for Elastic Defend. You will research attacker techniques, extend endpoint visibility, and write high-performance C/C++ code that runs across millions of endpoints.

You will reverse engineer malware, study evasion, and drive end-to-end efficacy with telemetry feedback. You will collaborate with a distributed team of researchers, data scientists, and engineers, mentoring others, setting