Overview In this role, you will help shape Elastic Defend by researching and shipping innovative endpoint protection features. You’ll work with a cross-functional Security team to tackle real-world attacker techniques and broaden visibility across Windows, macOS, and Linux. You’ll lead initiatives, mentor engineers, and share findings with the wider security community to advance protective technologies.
health coverage for you and family
Research attacker techniques and translate findings into shipped protections
Extend endpoint visibility by instrumenting new event sources across Windows, macOS, and Linux
Develop production C/C++ code for millions of endpoints with performance and stability in mind
Own efficacy end-to-end by reviewing telemetry, investigating false positives, and mitigating performance issues




Extend protection parity across platforms and architectures, including macOS, Linux, and new hardware
Collaborate with detection engineers, malware researchers, and data scientists to align telemetry with protection
Lead technical direction on multi-release initiatives and mentor junior engineers
Publish research and contribute to Elastic Security Labs and open-source projects
6+ years of development experience in C, C++, and Python
~ Deep OS internals knowledge (Windows depth preferred)
~ Reverse engineering and malware analysis experience
~ C, C++, Python
Windows kernel/user-mode internals
macOS and Linux depth

📌 Senior Security Research Engineer (Córdoba)
🏢 Elastic
📍 Córdoba