Principal Security Research Engineer (AI Security)

• As a Principal Security Research Engineer on the Threat Research and Detection Engineering (TRaDE) team, you’ll play a key role in shaping the detection capabilities of Elastic Security
• You’ll work hands-on with detection engineering and threat research, focusing on enhancing our defenses, particularly in the areas of AI security
• This position invites you to apply your solid security background and keen interest in validating detection methods, helping to create effective and reliable detection content that benefits the wider community
• Improving and creating new internal rule management capabilities to ship rigorous protections
• Developing new capabilities and Elastic AI workflows to steer and streamline our threat research and detection engineering processes
• Investigate new multidomain threat vectors and attack methodologies to stay ahead of emerging risks
• Monitor security trends and threat intelligence reports for relevant insights
• Create and present findings to enhance team knowledge and community awareness

Benefits

• Toast to your health: Fully paid health coverage for you and your family, in many locations.
• Craft your calendar: Flexible location and schedule for most roles.
• Create space for you: Distributed by design workforce, plus generous number of vacation days each year.
• Embrace parenthood: Minimum of 16 weeks of parental leave, plus generous family formation benefits.
• Give back your time: 40 hours each year to use toward volunteering with organizations and causes you’re passionate about.
• Amplify your impact: Double your charitable giving — we match donations up to $1500 USD (or local currency equivalent).- Previous successes in presenting findings and insights to technical audiences
• We’re looking for candidates with experience in Generative AI Security and who intimately understand MITRE ATLAS / ATT&CK threat techniques and behaviors
• Experience with Elastic Security Solution and proficiency in writing or validating detections using a query language (e.g. EQL, KQL, SQL)
• You have a proven track record of using AI to accelerate development, debug complex systems, and optimize code, while still owning the final outcomes
• Proficiency in modern AI/ML frameworks and hands-on experience integrating LLM APIs into production applications
• Proven ability to seamlessly transition between different projects, codebases, or scrum teams based on dynamic business priorities
• Demonstrated experience leveraging AI-assisted development tools to accelerate feature development, debug complex systems, optimize existing codebases, generate telemetry, conduct threat research, and assist detection engineering workflows
• You work autonomously and can drive decisions and results in a distributed team by leveraging asynchronous, direct, and transparent communication