Overview

As a Senior Security Research Engineer on SONAR, you take on hard, uncharted malware analysis to drive defenses for Elastic Security customers. You reverse engineer samples across Windows, macOS, and Linux, surface campaigns from millions of endpoints, and ship protections and scalable tooling. You publish findings and contribute to public research, while mentoring others and shaping our technical direction.

This role offers impact through public research, cross-team collaboration, and contributions to defense-at-scale.

Compensaciones / Beneficios competitive pay health coverage for you and family adaptable locations and schedules generous vacation days donation matching up to $2000

volunteer time off (up to 40 hours/year)

Responsabilidades Reverse engineer previously undocumented malware across Windows, macOS, and Linux, uncovering communication, configuration, and persistence mechanisms

Analyze telemetry from millions of endpoints to identify threats and build campaign context for customers

Convert discoveries into protections; author detection signatures and build automation/AI-assisted workflows

Publish research publicly and share tooling/detection artifacts; present at conferences





Collaborate with other Elastic Security teams on threat intelligence and detection engineering projects

Help lead the teams technical direction; mentor junior researchers and drive long-running investigations

Requisitos principales 6+ years of professional experience reverse engineering malware and researching adversary tradecraft across PE, ELF, Mach-O formats and x86-64/ARM architectures

Python development for research tooling; ability to read C/C++; willingness to learn Rust/Go/NodeJS as needed

YARA authorship and scalable hunting; capable of identifying weak signals in large telemetry datasets

Strong fundamentals in Windows/Linux internals, network protocols ( and applied cryptography

Technical writing ability to produce clear, public analyses

Proven track record of using AI to accelerate development and debugging while owning outcomes

Ability to switch between projects or teams in dynamic environments

Collaborative mindset, eagerness to learn new skills and technologies, and passion for defense of data collaboration curiosity/learning mindset mentorship malware reverse engineering static and dynamic analysis

PE/ELF/Mach-O, x86-64, ARM

📌 Senior Security Research Engineer, SONAR (Security Operations and Novel Adversary Research) (Granada)
🏢 Elastic
📍 Granada