Senior Manager, Endpoint Security & ML Defense

Elasticsearch B.V.; Northern (KY); Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Health coverage

Flexible locations and schedules

Generous vacation days

Donations matching

Parental leave

Job summary

Elastic seeks a Senior Manager for the Security Endpoint Protections team to lead a globally distributed group of engineers. You will guide research across endpoint internals, prevention engineering, and machine learning, setting direction for model development and data telemetry.

You will own the roadmap, collaborate with product managers, and drive delivery of high‑impact protections across Windows, macOS, and Linux.

Qualifications

• Leadership of senior technical individual contributors on a globally distributed team.
• Hands-on security research experience with attacker TTPs and protections shipped in software.
• Deep operating system internals knowledge (Windows focus) in kernel and user mode.
• Hands-on reverse engineering and malware analysis carried out personally.
• Adversarial mindset to design protections resilient to evasion.
• Clear communication for technical and executive audiences; self-driven in distributed settings.

Responsibilities

• Lead, mentor, and grow a world-class engineering team across endpoint internals, prevention engineering, and ML.
• Own the roadmap and drive delivery; define requirements with product managers for high-quality features.
• Connect team work to Elastic Security and unlock new capabilities across the product.
• Direct the team's machine learning work, including data quality and telemetry features.
• Drive cross-platform protection parity from Windows to macOS/Linux; maintain vendor relationships.
• Represent the team externally through conferences, talks, and customer engagements.

Skills

People leadership

Security research

OS internals

Reverse engineering

Machine learning in security

Job description

Elastic seeks a Senior Manager for the Security Endpoint Protections team to lead a globally distributed group of engineers. You will guide research across endpoint internals, prevention engineering, and machine learning, setting direction for model development and data telemetry.

You will own the roadmap, collaborate with product managers, and drive delivery of high‑impact protections across Windows, macOS, and Linux.