Senior Security Research Engineer

Elastic
United States
Full timeUSD 133,100 - 210,600 annuallyFunction: Research & Scientific (R&D)Experience: 6+ yearsSkills: ["Collaboration","Communication","Mentorship","Autonomous ownership","Resilience"]

Lead security research for Elastic Defend by converting emerging attacker techniques into production endpoint protections. Research advanced tradecraft, extend endpoint visibility across Windows, macOS, and Linux, and ship performant C/C++ code at scale. Reverse engineer malware and study evasion, review fleet telemetry to reduce false positives and performance regressions, and help expand protection parity and technical direction. Collaborate with malware researchers, detection engineers, and data scientists, and publish findings through Elastic Security Labs and conferences.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Elastic
Elastic
2 weeks ago

Senior Security Research Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Lead security research for Elastic Defend by converting emerging attacker techniques into production endpoint protections. Research advanced tradecraft, extend endpoint visibility across Windows, macOS, and Linux, and ship performant C/C++ code at scale. Reverse engineer malware and study evasion, review fleet telemetry to reduce false positives and performance regressions, and help expand protection parity and technical direction. Collaborate with malware researchers, detection engineers, and data scientists, and publish findings through Elastic Security Labs and conferences.
Location: United States
Employment Type: Full time
Job Function: Research & Scientific (R&D)
Seniority: Mid level

Key Responsibilities

  • •Research emerging attacker techniques and turn them into shipped protections that hold up against active adversaries.
  • •Extend endpoint visibility by instrumenting new event sources and closing telemetry gaps across Windows, macOS, and Linux.
  • •Develop performant, stable production code in C/C++ that runs on millions of endpoints and meets latency/quality constraints.
  • •Reverse engineer malware and analyze evasion techniques to inform and harden endpoint protections.
  • •Own end-to-end efficacy using fleet-scale telemetry to investigate false positives/performance regressions and establish mitigations.

Pay and Benefits

Salary: USD 133,100 - 210,600 annually
Equity and Bonus:Equity
Perks:Health Insurance401kParental Leave

Key Requirements

  • •6+ years analyzing attacker TTPs and building detection methods for real security threats.
  • •6+ years of C, C++, and Python development experience, writing safe, fast, maintainable code in security-critical systems.
  • •Deep operating system internals knowledge in kernel and user mode, with strongest Windows knowledge and solid macOS/Linux experience.
  • •In-depth reverse engineering and malware analysis experience, comfortable with tooling for reading hard binaries.
  • •An adversarial mindset to anticipate evasion and design resilient protections, with strong collaboration and autonomous execution in a distributed team.
Experience:6+ yearsEndpoint securityMalware analysisReverse engineeringDistributed teams
Skills:CollaborationCommunicationMentorshipAutonomous ownershipResilience
Languages:English
Tech Stack:CC++PythonWindowsMacOSLinuxKernelDriver developmentElastic StackElasticsearchKibana

Company Brief

Elastic
Builds the Elastic Stack (Elasticsearch, Kibana, Beats, Logstash) and provides search, observability, and security solutions that enable organizations to search, analyze, and protect data in real time across applications, infrastructure, and enterprises.
Industry: Data Infrastructure
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Amsterdam, Netherlands
Founded: 2012
WebsiteLinkedIn