Senior Security Research Engineer, SONAR (Security Operations and Novel Adversary Research)
ElasticEnterprise Software company
United States$133,100 - $210,600 USDSenior
Data & AINew
About the role
TL;DR
Senior Security Research Engineer to discover novel adversary behavior and develop protections.
- •SONAR is the adversary research team within Elastic Security.
- •We discover novel adversary behavior through malware reverse engineering, threat hunting, and vulnerability research, turn every discovery into protections that ship to customers, and share our work publicly through Elastic Security Labs.
- •We want to make environments hostile to adversaries, and to put rare knowledge and tooling within reach of every defender.
- •Key Responsibilities Reverse engineer malware across Windows, macOS, and Linux.
- •Operate global data systems to identify and mitigate threats.
- •Author signatures and build automation for threat detection.
- •Publish research on Elastic Security Labs and release tools to public GitHub repositories.
- •Collaborate with other Elastic Security teams on threat intelligence and detection engineering.
- •Requirements 6+ years of professional experience in malware reverse engineering and adversary research.
- •Proficiency in Python for research tooling and automation, with ability to read C and C++.
- •Experience with YARA authorship and large-scale threat hunting.
- •Working knowledge of Windows and Linux internals, network protocols, and applied cryptography.
- •Technical writing ability for public analysis.
Required skills
PythonC++CLinux
Nice-to-have skills
Elasticsearch
Domain expertise
cybersecurity
Benefits & perks
Stock program, 401k matching, Health coverage, Flexible locations and schedules, Vacation days, Donation matching, Volunteer time off, Parental leave
Tech stack
PythonC++CGitLinuxJiraConfluenceElasticsearch