Senior Endpoint Security Research Engineer

Elastic; United States; A distancia; USD 133.000 - 211.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive pay

Health coverage

Flexible schedule

Vacation days

Stock program

401k match

Volunteer time

Parental leave

Descripción de la vacante

Elastic is seeking a Senior Security Research Engineer to help lead the Protections at the core of Elastic Defend. You will research attacker techniques, design protections, and extend visibility across Windows, macOS, and Linux.

The role involves writing high-performance C/C++ in a security-critical codebase, reverse engineering malware, and collaborating with researchers across multiple time zones. You will own the efficacy of protections, review telemetry at scale, and address false positives

Formación

• 6+ years of experience analyzing attacker TTPs and building detection methods for real threats.
• 6+ years of development in C, C++, and Python with secure and maintainable code in security-critical contexts.
• Deep operating system internals knowledge, Windows depth prioritized, plus macOS/Linux depth.

Responsabilidades

• Research attacker techniques and turn them into shipped protections.
• Extend endpoint visibility across Windows, macOS, and Linux; deepen telemetry and close data gaps.
• Develop production C/C++ code that runs on millions of endpoints with low overhead.
• Reverse engineer malware and study evasion to improve protections.
• Own efficacy end-to-end by reviewing telemetry, mitigating false positives and performance issues.
• Collaborate across Elastic Security; work with detection engineers, malware researchers, and data scientists.
• Lead technical direction, drive cross-release initiatives, and mentor junior engineers.
• Publish and present research on Elastic Security Labs and related open source projects.

Conocimientos

C/C++

Python

OS internals

Reverse engineering

Threat research

Distributed teamwork

Herramientas

Ghidra

IDA Pro

Debugger

Descripción del empleo

Elastic is seeking a Senior Security Research Engineer to help lead the Protections at the core of Elastic Defend. You will research attacker techniques, design protections, and extend visibility across Windows, macOS, and Linux.

The role involves writing high-performance C/C++ in a security-critical codebase, reverse engineering malware, and collaborating with researchers across multiple time zones. You will own the efficacy of protections, review telemetry at scale, and address false positives