Descripción de la oferta
Overview
In this role, you will help shape Elastic Defend by researching and shipping innovative endpoint protection features. You’ll work with a cross-functional Security team to tackle real-world attacker techniques and broaden visibility across Windows, macOS, and Linux. Your work directly impacts customers by reducing threat exposure at scale and guiding the evolution of the platform. You’ll lead initiatives, mentor engineers, and share findings with the wider security community to advance protective technologies.
Compensaciones / Beneficioscompetitive payhealth coverage for you and familyflexible locations and schedulesgenerous vacation daysdonation matching up to $2000volunteer hours allowance (up to 40 hours per year)
ResponsabilidadesResearch attacker techniques and translate findings into shipped protectionsExtend endpoint visibility by instrumenting new event sources across Windows, macOS, and LinuxDevelop production C/C++ code for millions of endpoints with performance and stability in mindReverse engineer malware and understand evasion to harden protectionsOwn efficacy end-to-end by reviewing telemetry, investigating false positives, and mitigating performance issuesExtend protection parity across platforms and architectures, including macOS, Linux, and new hardwareCollaborate with detection engineers, malware researchers, and data scientists to align telemetry with protectionLead technical direction on multi-release initiatives and mentor junior engineersPublish research and contribute to Elastic Security Labs and open-source projects
Requisitos principales6+ years of experience with attacker TTPs and detection methods6+ years of development experience in C, C++, and PythonDeep OS internals knowledge (Windows depth preferred)Reverse engineering and malware analysis experienceAdversarial mindset to anticipate evasionCollaborative, autonomous, and communicative in distributed teamsProven ability to apply AI to accelerate development and optimize codecollaborative mindseteagerness to learn new platforms and technologiesautonomy in decision-making and communicationC, C++, PythonWindows kernel/user-mode internalsmacOS and Linux depth
