Senior Security Research Engineer, Endpoint Protections

Elastic; Norge (OK); On-site; USD 78,000 - 123,000; Full time

Benefits offered by this job

Health coverage

Flexible locations & schedules

Generous vacation days

Donations matching

Volunteer hours

Parental leave

Job summary

Elastic, the Search AI Company, is seeking a Senior Security Research Engineer to lead protections for Elastic Defend across Windows, macOS, and Linux. You will research attacker techniques, design protections, and contribute production C/C++ code at scale.

You will collaborate with a distributed team of researchers and engineers, mentor junior staff, and publish findings to Elastic Security Labs. A strong background in OS internals, malware analysis, and AI-assisted development is essential.

Qualifications

• 6+ years of professional security experience analyzing attacker tactics, techniques, and procedures (TTPs) and building detection methods for real security threats.
• 6+ years of development experience in C, C++, and Python, with the judgment to write code that is safe, fast, and maintainable in a security-critical codebase.
• Deep operating system internals knowledge, in both kernel and user mode, with Windows depth as a priority and macOS/Linux depth close behind.
• In-depth reverse engineering and malware analysis experience.
• An adversarial instinct to anticipate evasion and design for resilience.
• Collaborative mentality and willingness to learn new skills, platforms, and technologies.
• Proven track record of using AI to accelerate development, debugging, and optimization while owning outcomes.
• Autonomous work style in distributed teams with clear communication.

Responsibilities

• Research emerging attacker techniques and translate them into shipped protections for endpoint security.
• Extend endpoint visibility across Windows, macOS, and Linux; enhance telemetry and close gaps defenders rely on.
• Develop production C/C++ code that runs on millions of endpoints with high performance and stability.
• Reverse engineer malware and study evasion techniques to strengthen protections.
• Own efficacy end-to-end: review telemetry, investigate false positives and performance regressions, plan mitigations.
• Extend protection parity across platforms and new architectures as they appear.
• Collaborate with Elastic Security across countries and time zones; work with detection engineers, researchers, and data scientists.
• Lead technical direction on initiatives spanning multiple releases and mentor junior engineers.
• Publish and present research in Elastic Security Labs and conferences.

Skills

Security research

C/C++ development

Python development

Reverse engineering

Kernel-mode expertise

OS internals

Analytical mindset

AI-enabled development

Distributed teamwork

Job description

Elastic, the Search AI Company, is seeking a Senior Security Research Engineer to lead protections for Elastic Defend across Windows, macOS, and Linux. You will research attacker techniques, design protections, and contribute production C/C++ code at scale.

You will collaborate with a distributed team of researchers and engineers, mentor junior staff, and publish findings to Elastic Security Labs. A strong background in OS internals, malware analysis, and AI-assisted development is essential.