About The Position
Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. The Threat Research and Detection Engineering (TRaDE) team is responsible for developing and maintaining the prebuilt detection logic shipped with Elastic Security, researching emerging threats, validating detection efficacy, and engaging with the global community to democratize defensive capabilities. We’re looking for a Senior Offensive Security Engineer with a strong adversarial perspective and hands-on offensive engineering skills. This role focuses on strengthening detections, surfacing bypasses, improving telemetry usage, and building internal capabilities that help us stay ahead of attackers. If you enjoy digging into real-world tradecraft and using it to elevate defensive engineering, this might be the perfect fit! Instead of traditional red-team campaigns or long-form assessments, the work centers on focused, high-impact offensive research and engineering:
Requirements
- Candidates often bring experience from offensive security, adversarial R&D, red teaming, exploit research, or offensive tooling development. A strong engineering mindset and curiosity about how attackers think tend to be excellent signals for success.
- Proficiency with scripting languages like Python, PowerShell, or Bash; familiarity with C/C++ for PoCs or bypass tools.
- Experience researching evasions, testing detection boundaries, or probing SIEM/EDR/cloud detection systems.
- Understanding exploit behavior, OS internals, telemetry sources, and attacker tradecraft.
- Knowledge of MITRE ATT&CK and common offensive frameworks, with the ability to adapt tooling when needed.
- Clear communication when collaborating with defenders such as SOC analysts, detection engineers, or incident responders.
- A creative and inquisitive approach to security problems—and an interest in helping defenders win!
Nice To Haves
- Experience writing or contributing to detections for SIEM, EDR, cloud environments, or related platforms.
- Understanding of the Elastic Security Solution, Elastic’s prebuilt rules, Elastic query languages, or the Elastic Common Schema.
- Experience developing offensive testing frameworks, telemetry generators, or automated detection QA pipelines.
- Contributions to open-source security tools, research publications, technical blog posts, or conference talks.
- Knowledge of RE tools like Ghidra or IDA (useful occasionally, but not a core part of the job).
Responsibilities
- Partnering with detection engineers and researchers to validate logic, challenge assumptions, and uncover evasions.
- Running targeted adversarial tests to explore realistic attacker behaviors and improve detection coverage.
- Creating internal tooling that generates telemetry, mimics attacker techniques, or automates validation workflows.
- Analyzing exploit behavior, payload mechanics, and attacker tradecraft, occasionally using lightweight reverse engineering when it directly supports detection work.
- Identifying telemetry gaps or weak signals and collaborating with engineering teams to improve visibility.
- Contributing to purple-team style initiatives by translating offensive findings into durable, production-ready detections.
- Sharing research and insights through Elastic Security Labs, blogs, workshops, or community engagements.
- Keeping up with attacker trends, tools, and evasion techniques to help guide our detection roadmap.
Benefits
- Competitive pay based on the work you do here and not your previous salary
- Health coverage for you and your family in many locations
- Ability to craft your calendar with flexible locations and schedules for many roles
- Generous number of vacation days each year
- Increase your impact - We match up to $2000 (or local currency equivalent) for financial donations and service
- Up to 40 hours each year to use toward volunteer projects you love
- Embracing parenthood with minimum of 16 weeks of parental leave
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
Number of Employees
1,001-5,000 employees
