Descripción de la oferta
Overview
As a Senior Security Research Engineer on SONAR, you take on hard, uncharted malware analysis to drive defenses for Elastic Security customers. You reverse engineer samples across Windows, macOS, and Linux, surface campaigns from millions of endpoints, and ship protections and scalable tooling. You publish findings and contribute to public research, while mentoring others and shaping our technical direction. This role offers impact through public research, cross-team collaboration, and contributions to defense-at-scale.
Compensaciones / Beneficioscompetitive payhealth coverage for you and familyflexible locations and schedulesgenerous vacation daysdonation matching up to $2000volunteer time off (up to 40 hours/year)
ResponsabilidadesReverse engineer previously undocumented malware across Windows, macOS, and Linux, uncovering communication, configuration, and persistence mechanismsAnalyze telemetry from millions of endpoints to identify threats and build campaign context for customersConvert discoveries into protections; author detection signatures and build automation/AI-assisted workflowsPublish research publicly and share tooling/detection artifacts; present at conferencesCollaborate with other Elastic Security teams on threat intelligence and detection engineering projectsHelp lead the teams technical direction; mentor junior researchers and drive long-running investigations
Requisitos principales6+ years of professional experience reverse engineering malware and researching adversary tradecraft across PE, ELF, Mach-O formats and x86-64/ARM architecturesPython development for research tooling; ability to read C/C++; willingness to learn Rust/Go/NodeJS as neededYARA authorship and scalable hunting; capable of identifying weak signals in large telemetry datasetsStrong fundamentals in Windows/Linux internals, network protocols (HTTP/TLS), and applied cryptographyTechnical writing ability to produce clear, public analysesProven track record of using AI to accelerate development and debugging while owning outcomesAbility to switch between projects or teams in dynamic environmentsCollaborative mindset, eagerness to learn new skills and technologies, and passion for defense of datacollaborationcuriosity/learning mindsetmentorshipmalware reverse engineeringstatic and dynamic analysisPE/ELF/Mach-O, x86-64, ARM
