9 days ago
Spain (city not specified)Senior
Responsibilities
- Research emerging attacker techniques and develop shipped endpoint protections against threats including injection, credential theft, ransomware, and kernel tampering.
- Instrument event sources across Windows, macOS, and Linux to improve endpoint visibility and telemetry.
- Develop performant, stable C/C++ production code running on millions of endpoints.
- Reverse engineer malware and study evasion techniques to strengthen endpoint security controls.
- Review fleet-scale customer telemetry, investigate false positives and performance regressions, and establish mitigations.
- Extend protection parity across Windows, macOS, Linux, and new hardware architectures.
- Collaborate with detection engineers, malware researchers, data scientists, and distributed endpoint engineering teams.
- Lead cross-release technical initiatives, contribute to design and code reviews, and mentor less-experienced engineers.
- Publish research, present at conferences, and contribute to open-source security projects.
Requirements
- 6+ years of professional experience analyzing attacker tactics, techniques, and procedures and building detection methods for real security threats.
- 6+ years of development experience in C, C++, and Python.
- Deep knowledge of operating-system internals in kernel and user mode, especially Windows, with macOS or Linux experience preferred.
- In-depth reverse-engineering and malware-analysis experience.
- Ability to anticipate evasion techniques and design resilient security protections.
- Experience using AI to accelerate development, debug complex systems, and optimize code while owning final outcomes.
- Ability to work autonomously and drive decisions in a distributed team through asynchronous, direct, and transparent communication.
- Preferred qualifications include vulnerability research, exploit development, responsible disclosure, red teaming, offensive-tool development, kernel-mode or driver development, open-source security-tool maintenance, conference speaking or publication experience, machine learning for endpoint security, and familiarity with the Elastic Stack, Elasticsearch, Kibana, and Elastic Security.
Benefits
- Base salary with no variable compensation component, with a typical starting range of €67.000—€106.000 EUR.
- Health coverage for employees and families in many locations.
- Flexible locations and schedules for many roles at a distributed company.
- Generous vacation days.
- Matching donations up to $2000 or local-currency equivalent.
- Up to 40 hours annually for volunteer projects.
- At least 16 weeks of parental leave.
About Elastic
Elastic builds the Elasticsearch-based platform for enterprise search, observability (logging, metrics, APM), and security (SIEM/endpoint). It sells subscriptions and Elastic Cloud managed services with usage-based pricing, combining open source and proprietary features through Elasticsearch and Kibana. Founded in 2012 and headquartered in San Francisco, Elastic is publicly traded on the NYSE and is used by more than half of the Fortune 500.