Senior Security Research Engineer, SONAR (Security Operations and Novel Adversary Research)
Elastic · Security - Protections
- Location
- Spain
- Workplace
- Unspecified
- Level
- Senior
- Type
- Unspecified
- Posted
- 1 month ago
- Source
- Greenhouse
Read the full posting & apply ↗
PythonGoRustC++CNode.jsLinuxElasticsearch
What the posting covers
About the company
Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings…
What is The Role
SONAR is the adversary research team within Elastic Security. We discover novel adversary behavior through malware reverse engineering, threat hunting, and vulnerability research, turn every discovery into protections that ship to customers, and share our…
What You Will Be Doing
Reverse engineer malware nobody has documented yet. Take apart obfuscated and packed samples across Windows, macOS, and Linux, and recover how they communicate, configure themselves, and stay hidden. Operate global data systems to identify and mitigate…
What You Bring
6+ years of professional experience reverse engineering malware and researching adversary tradecraft, static and dynamic, across multiple executable formats (PE, ELF, Mach-O) and architectures (x86-64, ARM), including obfuscated and packed code that defeats…
Bonus Points
Vulnerability research or novel technique discovery, with a track record of responsible disclosure. Participation in CTFs such as FLARE-ON or NetWars. Standing in the community: maintaining an open-source security tool, speaking at conferences (e.g., Black…
Additional Information - We Take Care of Our People
As a distributed company, diversity drives our identity. Whether you’re looking to launch a new career or grow an existing one, Elastic is the type of company where you can balance great work with great life. Your age is only a number. It doesn’t matter if…
Excerpts only. The employer’s page has the complete posting.