Senior Security Research Engineer @Elastic

Overview

The role involves working as a Senior Security Research Engineer on the Elastic Security Endpoint Protections team. The team focuses on developing visibility and prevention capabilities for Elastic Defend, an endpoint and SIEM security solution, to guard users against emerging threats.

Key Responsibilities

• Research emerging attacker techniques and convert them into effective protections.
• Build and extend endpoint visibility across Windows, macOS, and Linux.
• Develop efficient production code that operates on millions of endpoints.
• Reverse engineer malware to understand evasion techniques.
• Own efficacy from start to finish, analyzing customer telemetry and investigating issues.
• Extend protection capabilities across platforms.
• Collaborate with the broader Elastic Security team across different countries and time zones.
• Lead technical projects and mentor junior engineers.
• Publish research findings and present at conferences.

Requirements

• 6+ years of professional experience analyzing attacker tactics and developing detection methods.
• 6+ years of development experience in C, C++, and Python.
• Deep knowledge of operating system internals, especially in Windows.
• Experience in reverse engineering and malware analysis.
• Strong anticipation skills for potential evasions of protections.
• Collaborative approach and eagerness to learn new technologies.
• Track record of leveraging AI in development and debugging tasks.
• Experience communicating effectively in a distributed team.

Benefits

• Competitive salary in the range of $128,300 — $203,000 CAD.
• Stock program participation.
• Company-matched Registered Retirement Savings Plan (RRSP).
• Health coverage for you and your family.
• Flexible work locations and schedules.
• Generous vacation days and parental leave policy.
• Support for financial donations and volunteer projects.

Location

Remote role available for candidates based in Canada.

How to Apply

To apply, visit the Elastic careers page and submit your application.