Senior Endpoint Security Research Engineer

Elastic; United States; Hybrid; USD 93,000 - 146,000; Full time

Benefits offered by this job

Health coverage

Flexible schedules

Vacation days

Matching gifts

Volunteer hours

Parental leave

RRSP/401k style plan

Job summary

Elastic Security is seeking a Senior Security Research Engineer to lead the development of end-to-end protections for Elastic Defend across Windows, macOS, and Linux. You will research attacker techniques, implement production-grade C/C++ code, and extend endpoint visibility in collaboration with researchers, data scientists, and engineers worldwide.

You will mentor junior engineers and share findings with the security community, while contributing to a culture that values clear communication

Qualifications

• 6+ years of experience analyzing attacker tactics, techniques, and procedures (TTPs).
• 6+ years of development in C, C++, Python in security-critical codebase.
• Deep OS internals knowledge (Windows focus).
• Reverse engineering and malware analysis experience.
• Adversarial mindset to anticipate evasion.
• Collaborative mentality and eagerness to learn new platforms.

Responsibilities

• Research attacker techniques and translate into protections.
• Extend endpoint visibility across Windows, macOS, Linux.
• Develop production code in C/C++ for millions of endpoints.
• Reverse engineer malware and study evasion techniques.
• Own efficacy end-to-end, analyze telemetry and mitigate false positives.
• Extend protection parity across platforms and architectures.
• Collaborate across Elastic Security and mentor engineers.
• Publish and present research findings.

Skills

C/C++

Python

Security research

Reverse engineering

Malware analysis

Kernel/OS internals

Adversarial mindset

Team collaboration

AI acceleration

Distributed work

Mentoring

Tools

Elastic Stack

Elasticsearch

Kibana

Security tooling

Job description

Elastic Security is seeking a Senior Security Research Engineer to lead the development of end-to-end protections for Elastic Defend across Windows, macOS, and Linux. You will research attacker techniques, implement production-grade C/C++ code, and extend endpoint visibility in collaboration with researchers, data scientists, and engineers worldwide.

You will mentor junior engineers and share findings with the security community, while contributing to a culture that values clear communication