Senior Security Research Engineer

The Elastic Security Endpoint Protections team research, designs, and builds visibility and detection capabilities that are integrated into Elastic Defend, our endpoint and SIEM security solution. We are looking for a Security Research Engineer to join our team and assist with leading our efforts to build new, innovative features which will help secure our users against the latest emerging threats. You will collaborate with the broader Elastic Security team, which consists of a diverse group of skilled researchers, data scientists, and engineers who possess extensive domain expertise in their respective areas. Our geographically dispersed team values positivity and inclusivity in the workplace, clear communication, collaborative learning, and guided mentorship.

If you have a passion for security research and would enjoy the challenge of devising novel methods for thwarting malicious actors in an ever-evolving threat landscape, join our growing team!

What You Will Be Doing:

• Research emerging attacker techniques and develop innovative, effective, and resilient detection features.


• Integrate extended eventing and visibility capabilities into our endpoint codebase.


• Improve efficacy of our detection features by rapidly responding to emerging threats.


• Implement endpoint code in collaboration with peers in multiple countries and time zones.


• Review telemetry data and establish mitigation strategies to limit potential false positives and performance impact.


• Present research material at security conferences and publish technical content on the Elastic Security Labs.

What You Will Bring Along:

• 6+ years of professional experience analyzing attacker tactics, techniques, and procedures (TTPs) and developing detection methods for security threats


• 6+ years of strong development experience in C, C++, and Python.


• experience in reverse engineering and malware analysis.


• Subject matter expertise in Windows internals, security features, and system architecture.


• Collaborative mentality with a strong disposition to learn new skills and technologies.


• Motivation to succeed in a distributed, fast-paced, and autonomous work environment.