About the company
Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale. The Elastic Search AI Platform is used by more than 50% of the Fortune 500.
Responsibilities
- Research emerging attacker techniques and turn them into shipped protections
- Study real-world tradecraft across in-memory threats, injection, credential theft, ransomware, and kernel tampering
- Build and extend endpoint visibility across Windows, macOS, and Linux
- Develop production code that runs everywhere in performant, stable C/C++
- Reverse engineer malware and study evasion
- Own efficacy end to end, review customer telemetry at fleet scale
- Extend protection parity across platforms
- Collaborate across Elastic Security
- Help lead the team's technical direction
- Publish and present research on Elastic Security Labs
Requirements
- 6+ years of professional experience analyzing attacker TTPs and building detection methods
- 6+ years of development experience in C, C++, and Python
- Deep operating system internals knowledge in kernel and user mode
- In-depth reverse engineering and malware analysis experience
- An adversarial instinct
- A collaborative mentality
- Proven track record of using AI to accelerate development
- Ability to work autonomously in a distributed team
Conditions
- Compensation in the form of base salary
- No variable compensation component