Senior Manager, Endpoint Protections

The Elastic Security Endpoint Protections team builds the visibility, prevention, and on-device machine learning capabilities at the core of Elastic Defend, our endpoint and SIEM security solution. We work in kernel and user mode across Windows, macOS, and Linux, against adversaries who study how to defeat what we build. Our work reaches the security community as well as the product, through original research and conference talks. We are looking for a Senior Manager who has done this work personally and can still review a design or write code. You will lead a globally distributed team and set the tone for a group that values candid feedback, collaborative learning, and mentorship.

We believe security is a team sport, and our efficacy is independently verified rather than simply claimed: in recent third-party enterprise protection testing, Elastic Security earned a perfect malware protection score with zero false alarms, the top result in the field. If you are energized by leading world-class engineers and making a measurable dent in how the industry defends the endpoint, we would love to hear from you!

What You Will Be Doing:

The Elastic Security Endpoint Protections team builds the visibility, prevention, and on-device machine learning capabilities at the core of Elastic Defend, our endpoint and SIEM security solution. We work in kernel and user mode across Windows, macOS, and Linux, against adversaries who study how to defeat what we build. Our work reaches the security community as well as the product, through original research and conference talks. We are looking for a Senior Manager who has done this work personally and can still review a design or write code. You will lead a globally distributed team and set the tone for a group that values candid feedback, collaborative learning, and mentorship.

We believe security is a team sport, and our efficacy is independently verified rather than simply claimed: in recent third-party enterprise protection testing, Elastic Security earned a perfect malware protection score with zero false alarms, the top result in the field. If you are energized by leading world-class engineers and making a measurable dent in how the industry defends the endpoint, we would love to hear from you!

What You Bring:
People-leadership experience managing senior technical individual contributors on a globally distributed team. You lead with curiosity rather than authority, actively solicit feedback, and have a track record of growing people, not just shipping releases.
You have been a practitioner. Substantial hands-on experience as a security researcher before moving into leadership: analyzing attacker tactics, techniques, and procedures (TTPs), building the protections that counter them, and shipping into software that runs on customer machines at scale.
Operating system internals knowledge, in both kernel and user mode, earned hands-on rather than through oversight, and deep enough to reason about undocumented behavior and challenge a design on its technical merits. Windows depth is what we need most, with macOS or Linux close behind.
Hands-on reverse engineering and malware analysis experience. You have done this work yourself, and can still read a disassembly, assess a research finding on its merits, and judge which threats warrant investment.
An adversarial instinct. You anticipate how a protection will be evaded before it ships, and hold the team to designing for resilience rather than for the proof of concept in front of them.
Clear communication skills, comfortable writing for technical and executive audiences and distilling deeply technical work for non-expert stakeholders.
Motivation to thrive in a distributed, autonomous environment, with a genuine passion for protecting customers from real-world adversaries.
Demonstrated experience leveraging AI-assisted development tools to accelerate feature development, debug complex systems, and optimize existing codebases.
You possess the ability to comfortably rotate across projects, collaborate across functions and teams, and seamlessly adapt to evolving team structures.