Senior Security Research Engineer, SONAR (Security Operations and Novel Adversary Research)
15 hours ago
Granada
Overview As a Senior Security Research Engineer on SONAR, you take on hard, uncharted malware analysis to drive defenses for Elastic Security customers. You reverse engineer samples across Windows, macOS, and Linux, surface campaigns from millions of endpoints, and ship protections and scalable tooling. You publish findings and contribute to public research, while mentoring others and shaping our technical direction. This role offers impact through public research, cross-team collaboration, and contributions to defense-at-scale. Compensaciones / Beneficios competitive pay health coverage for you and family flexible locations and schedules generous vacation days donation matching up to $2000 volunteer time off (up to 40 hours/year) Responsabilidades Reverse engineer previously undocumented malware across Windows, macOS, and Linux, uncovering communication, configuration, and persistence mechanisms Analyze telemetry from millions of endpoints to identify threats and build campaign context for customers Convert discoveries into protections; author detection signatures and build automation/AI-assisted workflows Publish research publicly and share tooling/detection artifacts; present at conferences Collaborate with other Elastic Security teams on threat intelligence and detection engineering projects Help lead the teams technical direction; mentor junior researchers and drive long-running investigations Requisitos principales 6+ years of professional experience reverse engineering malware and researching adversary tradecraft across PE, ELF, Mach-O formats and x86-64/ARM architectures Python development for research tooling; ability to read C/C++; willingness to learn Rust/Go/NodeJS as needed YARA authorship and scalable hunting; capable of identifying weak signals in large telemetry datasets Strong fundamentals in Windows/Linux internals, network protocols (HTTP/TLS), and applied cryptography Technical writing ability to produce clear, public analyses Proven track record of using AI to accelerate development and debugging while owning outcomes Ability to switch between projects or teams in dynamic environments Collaborative mindset, eagerness to learn new skills and technologies, and passion for defense of data collaboration curiosity/learning mindset mentorship malware reverse engineering static and dynamic analysis PE/ELF/Mach-O, x86-64, ARM
