Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic's complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI.

The Elastic Security Endpoint

Protections team researches, designs, and builds the visibility and prevention capabilities at the core of Elastic Defend, our endpoint and SIEM security solution. We are looking for a Senior Security Research Engineer to help lead our efforts to build innovative features that secure our users against the latest emerging threats. You will collaborate with the broader Elastic Security team, a diverse group of skilled researchers, data scientists, and engineers who bring deep domain knowledge in their respective areas.

Research emerging attacker techniques and turn them into shipped protections. Instrument new event sources across Windows, macOS, and Linux, deepen the telemetry we already collect, and close the gaps attackers rely on. Write performant, stable C/C++ that executes on millions of endpoints, where a memory leak or a few milliseconds of overhead is a customer-visible problem.

Learn how attackers bypass endpoint security controls in the wild, and feed that understanding directly into the protections you design and harden. Review customer telemetry at fleet scale, investigate false positives and performance regressions, and establish mitigation strategies. Bring the depth we have on Windows to macOS and Linux, and support new hardware architectures as they reach the enterprise.

Collaborate across Elastic Security. Implement endpoint code alongside peers in multiple countries and time zones, and work with the detection engineers, malware researchers, and data scientists who rely on your telemetry. Take point on initiatives that span multiple releases, raise the bar in design and code reviews, and mentor engineers earlier in their careers.





Share your research on Elastic Security Labs, present at conferences, and contribute to the open source projects that organizations around the world rely on. 6+ years of professional experience analyzing attacker tactics, techniques, and procedures (TTPs) and building detection methods for real security threats. ~6+ years of development experience in C, C++, and Python, with the judgment to write code that is safe, fast, and maintainable in a security-critical codebase. ~ Deep operating system internals knowledge, in both kernel and user mode, deep enough to reason about undocumented behavior and find security-relevant structures nobody has written about yet. Windows depth is what we need most, with macOS or Linux depth close behind. ~ In-depth reverse engineering and malware analysis experience, and comfort with the tooling that makes hard binaries readable. ~ You anticipate how a protection will be evaded before it ships, and design for resilience rather than for the proof of concept in front of you. ~ Passion for protecting the world's data from attack! Vulnerability research and exploit development, particularly with a track record of responsible disclosure to platform vendors.

Red teaming experience, or a background in building offensive tooling and defeating endpoint security products. Ownership or long-term maintenance of an open-source security tool with a real user base.

Experience applying machine learning to endpoint security problems. Familiarity with the Elastic Stack (Elasticsearch, Kibana) and Elastic Security. It doesn't matter if you're just out of college or your children are; Health coverage for you and your family in many locations Increase your impact - We match up to $2000 (or local currency equivalent)



for financial donations and service Up to 40 hours each year to use toward volunteer projects you love Security & Privacy Responsibilities: Take ownership of protecting the confidentiality, integrity, and availability of organizational data and systems by following applicable privacy and security policies, standards, and procedures.

Ensure that all individual contributions follow Elastic's Secure Software Development Framework (SSDF). Proactively participate in mandatory role-based training to ensure personal technical execution consistently aligns with the highest standards of data protection, data privacy, and system resilience. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, pregnancy, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, disability status, or any other basis protected by federal, state or local law, ordinance or regulation.

Elasticsearch develops and distributes technology and information that is subject to U.Belarus, Cuba, Iran, North Korea, Syria, or Russia, including the Ukrainian territories annexed by Russia (The Crimea region of Ukraine, The Donetsk People's Republic (DNR), The Luhansk People's Republic (LNR), Kherson or Zaporizhzhia). An employee's position within the salary range will be based on several factors including, but not limited to, relevant education, qualifications, certifications, experience, skills, geographic location, performance, and business or organizational needs. Therefore, in addition to cash compensation, this role is currently eligible to participate in Elastic's stock program.

Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, pregnancy, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, disability status, or any other basis protected by federal, state or local law, ordinance or regulation.

📌 Senior Security Research Engineer (La Mancha)
🏢 Elastic
📍 La Mancha