Power insights and outcomes with The Elasticsearch Platform. See into your data and find answers that matter with enterprise solutions designed to help you accelerate time to insight. Try Elastic toda... Backed by NEA and Amplify.
About the role
SONAR is the adversary research team within Elastic Security. We discover novel adversary behavior through malware reverse engineering, threat hunting, and vulnerability research, turn every discovery into protections that ship to customers, and share our work publicly through Elastic Security Labs. We want to make environments hostile to adversaries, and to put rare knowledge and tooling within reach of every defender.
What they're looking for
- Python development experience for research tooling and automation, plus the ability to read C and C++. Malware arrives in Rust, Go, and NodeJS too, so you are willing to learn a new runtime when a sample demands it
- YARA authorship and hunting at scale. You write signatures that hold up against the next variant, and you can find a weak signal in a very large telemetry dataset
- Working knowledge of the fundamentals : Windows and Linux internals, network protocols including HTTP and TLS, and enough applied cryptography to recognize what is protecting a configuration blob
- Technical writing ability. You can turn a long investigation into a clear, public analysis that other defenders can act on
- You have a proven track record of using AI to accelerate development, debug complex systems, and optimize code, while still owning the final outcomes
- Proven ability to seamlessly transition between different projects, codebases, or scrum teams based on dynamic business priorities
More about this role
Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI.
SONAR is the adversary research team within Elastic Security. We discover novel adversary behavior through malware reverse engineering, threat hunting, and vulnerability research, turn every discovery into protections that ship to customers, and share our work publicly through Elastic Security Labs. We want to make environments hostile to adversaries, and to put rare knowledge and tooling within reach of every defender. We are looking for a Senior Security Research Engineer to take on our hardest analysis work and help set the technical direction of the team....
Browse similar: Startup jobs