Senior Security Research Engineer

Elastic

Confirmed live 2 days ago High trust

Remote

Quick summary

Work type: Remote
Location: Remote
Posted: 14 days ago
Freshness: Confirmed live 2 days ago

Market check

Salary context

How this pay compares to similar roles

Similar $180k

$121k most similar roles pay here $231k

This listing doesn't post a salary. Most similar roles pay $151,493–$208,800.

Based on 240 similar postings.

Employer

About Elastic

Elastic is the company behind Elasticsearch and the Elastic Stack (Elasticsearch, Kibana, Beats, and Logstash). It sells search, observability, and security products built on that search engine, primarily through its Elastic Cloud managed service.

Elastic currently has 240 open roles on FindRole.

Listed pay typically runs $133,100–$210,600 across 91 roles with salary data.

Most-posted roles

View all roles at Elastic

At a glance

TL;DR · Senior Security Research Engineer

Role Posting Log in to save

As a Senior Security Research Engineer on the Security Endpoint Protections team, you will research, design, and build visibility and prevention capabilities for Elastic Defend. You will investigate emerging attacker techniques such as in-memory threats, credential theft, and kernel tampering to develop robust protections. Your daily work involves building endpoint visibility across Windows, macOS, and Linux platforms while writing performant C, C++, and Python code for millions of endpoints. You will reverse engineer malware, study evasion tactics, and ensure production code remains stable and efficient. The role requires deep operating system internals knowledge, advanced reverse engineering skills, and an adversarial instinct to anticipate how protections might be bypassed. You will also collaborate with data scientists and engineers to improve telemetry, mentor junior staff, and contribute to the company's technical direction through research publications and conference presentations.

Skills

C C++ Python Windows Linux macOS Reverse Engineering Malware Analysis SIEM Elasticsearch Kibana Machine Learning Vulnerability Research Exploit Development Red Teaming Open Source

What you'll do

Research emerging attacker techniques to design and implement robust security protections.
Build and extend endpoint visibility by instrumenting new event sources across Windows, macOS, and Linux.
Develop high-performance, stable C/C++ code for production use on millions of endpoints.
Reverse engineer malware and analyze evasion techniques to harden existing security controls.
Monitor fleet-scale telemetry to investigate false positives and resolve performance regressions.
Ensure feature parity across different operating systems and hardware architectures.
Lead technical direction by mentoring junior engineers and conducting high-quality code reviews.
Publish research findings on Elastic Security Labs and present at industry conferences.

What we're looking for

6+ years of professional experience analyzing attacker TTPs and building detection methods for real security threats.
6+ years of development experience in C, C++, and Python to write safe, fast, and maintainable code.
Deep knowledge of operating system internals in both kernel and user mode, with a primary focus on Windows.
In-depth reverse engineering and malware analysis experience using tools to analyze hard binaries.
Proven track record of using AI to accelerate development, debug systems, and optimize code.
Ability to work autonomously and communicate effectively within a distributed team.
Experience in vulnerability research, exploit development, or red teaming is preferred.
Familiarity with the Elastic Stack (Elasticsearch, Kibana) and Elastic Security is a plus.

Save