Senior Endpoint Security Research Engineer – Flexible Locations

Elasticsearch B.V.; Northern (KY); Hybrid; USD 133,000 - 211,000; Full time

Benefits offered by this job

Health coverage

Flexible locations

Generous vacation days

Charitable donation matching

Volunteer time

Parental leave

Job summary

Elastic is seeking a Senior Security Research Engineer to lead efforts in building visibility and prevention for Elastic Defend. You will collaborate with a diverse team and help translate attacker tradecraft into robust endpoint protections across Windows, macOS, and Linux.

You will write high-performance C/C++ code, reverse engineer malware, and own the efficacy of protections from telemetry to customer outcomes.

Qualifications

• 6+ years of professional experience in security research and threat detection.
• 6+ years of development in C, C++, and Python in security-critical code.
• Deep OS internals knowledge in kernel and user mode, esp. Windows.
• Reverse engineering and malware analysis experience with relevant tooling.

Responsibilities

• Research attacker techniques and convert them into protections shipped to customers.
• Extend endpoint visibility by instrumenting Windows, macOS, and Linux sources.
• Develop production code that runs on millions of endpoints with performance in mind.
• Reverse engineer malware and study evasion to strengthen defenses.
• Own efficacy end to end by reviewing telemetry, FP rates, and performance regressions.
• Extend protection parity across platforms and architectures as needed.
• Collaborate with Elastic Security across countries and time zones.
• Lead technical direction and mentor engineers earlier in their careers.
• Publish and present research findings to the community.

Skills

Security research

C/C++

Python

OS internals

Reverse engineering

AI for development

Autonomous work style

Tools

Windows

macOS

Linux

Kernel debugging

Job description

Elastic is seeking a Senior Security Research Engineer to lead efforts in building visibility and prevention for Elastic Defend. You will collaborate with a diverse team and help translate attacker tradecraft into robust endpoint protections across Windows, macOS, and Linux.

You will write high-performance C/C++ code, reverse engineer malware, and own the efficacy of protections from telemetry to customer outcomes.