Senior Manager, Endpoint Protections

About the role

Elastic Security's Endpoint Protections team builds the visibility, prevention and on-device machine learning capabilities at the core of Elastic Defend, an endpoint and SIEM security solution. Working in kernel and user mode across Windows, macOS and Linux, the team leads research and conference talks. The Senior Manager leads a globally distributed team and sets the tone for a group that values candid feedback, collaborative learning and mentorship.

Key responsibilities

• Lead, mentor and grow a team of senior research engineers, coach career development, own the hiring pipeline and set new engineers up to contribute quickly.
• Own the roadmap and delivery, deciding where to invest in new visibility and deeper protection engines, and work with product managers to land high-quality features on release timelines.
• Connect the team's work to the wider Elastic Security product, so every event source added unlocks new detection and protection capabilities.
• Set direction on machine learning work: model development, training data quality and the telemetry features those models depend on.
• Drive cross-platform protection parity, bringing Windows depth to macOS and Linux, keeping ahead of new hardware architectures and maintaining vendor relationships for early access to OS security APIs.
• Support engineers in presenting at conferences and publishing on Elastic Security Labs, and represent the team to customers and partners.

Required profile

• People-leadership experience managing senior technical individual contributors on a globally distributed team.
• Substantial hands-on experience as a security researcher before moving into leadership, including analysing attacker TTPs and shipping protections at scale.
• Deep hands-on knowledge of OS internals in kernel and user mode, with strong Windows depth and macOS or Linux close behind.
• Hands-on reverse engineering and malware analysis experience, able to read disassembly and judge which threats warrant investment.
• Adversarial instinct, anticipating how protections will be evaded.
• Clear communication skills for technical and executive audiences.
• Comfortable rotating across projects and collaborating across functions and teams.

Required skills

• Reverse engineering and malware analysis
• Windows, macOS and Linux kernel and user-mode internals
• AI-assisted development tools

Bonus points: prior ownership of an EDR/EPP product, published research, ML engineer leadership, experience taking prototypes to GA release, conference speaking, and familiarity with the Elastic Stack and Elastic Security.

What we offer

• Base salary of EUR 80,400 to 127,200, with no variable component.
• Health coverage for you and your family in many locations.
• Flexible locations and schedules for many roles.
• Generous vacation days and up to 40 hours per year for volunteer projects.
• Parental leave of at least 16 weeks.