Senior Malware Threat Research Engineer

JobCubby; Northern (KY); Hybrid; USD 133,000 - 253,000; Full time

Benefits offered by this job

Health coverage wherever you work

Flexible locations and schedules

Vacation and donation matching

Job summary

Elastic is seeking a Senior Security Research Engineer to tackle adversary analysis across Windows, macOS, and Linux. You will reverse engineer malware, operate large-scale data systems, and translate discoveries into protections, signatures, and automation used by global customers.

You will publish research, share tooling, and present at conferences, while collaborating with Elastic Security teams and mentoring newer researchers.

Qualifications

• 6+ years of professional experience reverse engineering malware and researching adversary tradecraft across multiple executable formats (PE, ELF, Mach-O) and architectures (x86-64, ARM).
• Python development for research tooling and automation; comfortable with reading C/C++ and learning new runtimes as needed.
• YARA authorship and hunting at scale; signatures that withstand variants and large telemetry datasets.
• Familiarity with Windows/Linux internals, network protocols (HTTP/TLS), and cryptography for configuration protection.
• Ability to write clear, public analyses and technical documentation.

Responsibilities

• Reverse engineer malware across Windows, macOS, Linux to uncover communication and evasion techniques.
• Operate global data systems to surface threats from millions of endpoints and provide context for mitigations.
• Develop protections, signatures, and automation to speed future investigations.
• Publish research and tooling to Elastic Security Labs and public GitHub repositories.

Skills

Malware reverse engineering

Threat research

Python development

C/C++ reading

YARA

Windows/Linux internals

Technical writing

AI in development

Tools

Elastic Stack

Git

Job description

Elastic is seeking a Senior Security Research Engineer to tackle adversary analysis across Windows, macOS, and Linux. You will reverse engineer malware, operate large-scale data systems, and translate discoveries into protections, signatures, and automation used by global customers.

You will publish research, share tooling, and present at conferences, while collaborating with Elastic Security teams and mentoring newer researchers.