9 days ago
Base Salary
$133k - $211k/yr
Responsibilities
- Research emerging attacker techniques and convert them into shipped endpoint protections.
- Build endpoint visibility by instrumenting event sources and expanding telemetry across Windows, macOS, and Linux.
- Develop performant, stable production code in C and C++ for millions of endpoints.
- Reverse engineer malware, study evasion techniques, and harden endpoint security controls.
- Review fleet-scale customer telemetry, investigate false positives and performance regressions, and establish mitigations.
- Extend protection parity across platforms and support new hardware architectures.
- Collaborate with endpoint, detection, malware research, and data science engineers across distributed teams.
- Lead cross-release technical initiatives, contribute to design and code reviews, and mentor earlier-career engineers.
- Publish research, present at conferences, and contribute to open-source projects.
Requirements
- 6+ years of professional experience analyzing attacker tactics, techniques, and procedures and building detection methods for real security threats.
- 6+ years of development experience in C, C++, and Python.
- Deep kernel- and user-mode operating-system knowledge, especially Windows, with macOS or Linux expertise preferred.
- In-depth reverse engineering and malware analysis experience.
- Ability to anticipate evasion techniques and design resilient protections.
- Experience using AI to accelerate development, debug complex systems, and optimize code while owning final outcomes.
- Ability to work autonomously and drive decisions in a distributed team.
- Preferred experience includes vulnerability research, exploit development, responsible disclosure, red teaming, offensive tooling, kernel-mode or driver development, open-source security-tool maintenance, conference speaking, publication, machine learning for endpoint security, and familiarity with the Elastic Stack, Elasticsearch, Kibana, and Elastic Security.
Benefits
- Base salary with no variable compensation component.
- Typical starting salary range of $133,100—$210,600 USD; an alternate range of $159,900—$252,900 USD applies in select locations including Seattle, Los Angeles, the San Francisco Bay Area, and the New York City Metro Area.
- Eligibility for Elastic's stock program and a company-matched 401(k) with dollar-for-dollar matching up to 6% of eligible earnings.
- Health coverage, flexible locations and schedules for many roles, generous vacation, donation matching up to $2,000, up to 40 volunteer hours annually, and at least 16 weeks of parental leave.
- Distributed work environment with an emphasis on flexible work-life balance.
About Elastic
Elastic builds the Elasticsearch-based platform for enterprise search, observability (logging, metrics, APM), and security (SIEM/endpoint). It sells subscriptions and Elastic Cloud managed services with usage-based pricing, combining open source and proprietary features through Elasticsearch and Kibana. Founded in 2012 and headquartered in San Francisco, Elastic is publicly traded on the NYSE and is used by more than half of the Fortune 500.