Senior Security Research Engineer, SONAR (Security Operations and Novel Adversary Research)

Elastic's SONAR team seeks a Senior Security Research Engineer to reverse engineer malware, operate global data systems to identify threats, turn discoveries into shipped protections, build public research reputation, collaborate across Elastic Security, and help lead technical direction. The role involves analyzing obfuscated samples across Windows, macOS, Linux, authoring YARA signatures, and publishing research.

Requires 6+ years professional experience reverse engineering malware, Python development, YARA authorship at scale, working knowledge of Windows/Linux internals, network protocols (HTTP, TLS), applied cryptography, technical writing, and proven use of AI. Preferred: vulnerability research, CTF participation, community standing, attribution tradecraft, behavioral detection, and familiarity with Elastic Stack.