Senior Security Research Engineer - Endpoint Protection

Wwshemi; United States; On-site; USD 133,000 - 253,000; Full time

Benefits offered by this job

Health coverage

Flexible locations & schedules

Generous vacation days

Donation matching

Volunteer hours

Parental leave

Job summary

Elastic, the Search AI Company, is seeking a Senior Security Research Engineer to lead the protection features inside Elastic Defend across Windows, macOS, and Linux. You will translate real-world attacker techniques into shipped protections and collaborate with a diverse team of researchers, data scientists, and engineers across multiple time zones.

The role demands deep OS internals knowledge, strong C/C++ and Python skills, and a proven ability to reverse engineer malware.

Qualifications

• 6+ years of professional experience analyzing attacker TTPs and building detection methods.
• 6+ years of development in C, C++, and Python in security-critical code.
• Deep operating system internals knowledge (Windows; macOS or Linux).
• In-depth reverse engineering and malware analysis experience.

Responsibilities

• Research attacker techniques and turn them into protections across threats.
• Extend endpoint visibility across Windows, macOS, and Linux.
• Develop production C/C++ code for millions of endpoints.
• Reverse engineer malware and study evasion.
• Own efficacy end to end with telemetry, false positives, and performance.
• Extend protection parity across platforms and architectures.
• Collaborate with Elastic Security across countries and time zones.
• Lead technical direction and mentor engineers.
• Publish and present research at conferences and open-source projects.

Skills

C

C++

Python

Reverse engineering

Malware analysis

OS internals

AI in development

Security research

Collaborative teamwork

Async communication

Tools

Elastic Stack

Kernel-mode development

Job description

Elastic, the Search AI Company, is seeking a Senior Security Research Engineer to lead the protection features inside Elastic Defend across Windows, macOS, and Linux. You will translate real-world attacker techniques into shipped protections and collaborate with a diverse team of researchers, data scientists, and engineers across multiple time zones.

The role demands deep OS internals knowledge, strong C/C++ and Python skills, and a proven ability to reverse engineer malware.