OverviewIn this role, you will help shape Elastic Defend by researching and shipping innovative endpoint protection features.

You'll work with a cross-functional Security team to tackle real-world attacker techniques and broaden visibility across Windows, macOS, and Linux.

Your work directly impacts customers by reducing threat exposure at scale and guiding the evolution of the platform.

You'll lead initiatives, mentor engineers, and share findings with the wider security community to advance protective technologies.

Compensaciones / Beneficioscompetitive pay health coverage for you and family versátil locations and schedules generous vacation days donation matching up to $****

volunteer hours allowance (up to 40 hours per year)

ResponsabilidadesResearch attacker techniques and translate findings into shipped protections

Extend endpoint visibility by instrumenting new event sources across Windows, macOS, and Linux

Develop production C/C++ code for millions of endpoints with performance and stability in mind

Reverse engineer malware and understand evasion to harden protections

Own efficacy end-to-end by reviewing telemetry, investigating false positives,



and mitigating performance issues

Extend protection parity across platforms and architectures, including macOS, Linux, and new hardware

Collaborate with detection engineers, malware researchers, and data scientists to align telemetry with protection

Lead technical direction on multi-release initiatives and mentor junior engineers

Publish research and contribute to Elastic Security Labs and open-source projects

Requisitos principales6+ years of experience with attacker TTPs and detection methods

6+ years of development experience in C, C++, and Python

Deep OS internals knowledge (Windows depth preferred)

Reverse engineering and malware analysis experience

Adversarial mindset to anticipate evasion

Collaborative, autonomous, and communicative in distributed teams

Proven ability to apply AI to accelerate development and optimize code collaborative mindset eagerness to learn new platforms and technologies autonomy in decision-making and communication

C, C++, Python

Windows kernel/user-mode internals macOS and Linux depth

📌 Senior Security Research Engineer (Valladolid)
🏢 Elastic
📍 Valladolid