Senior Threat Detection Engineer - SIEM and Cloud Security (GenAI) at Elastic

Elastic

Spain·1h ago

SeniorFull-timePythonAWSGCPAzureElasticsearchAI

Salary Range

$63,648 - $86,112 /year

Estimated

This salary is estimated based on similar roles. The actual salary may vary.

About the Role

Elastic is seeking a Security Research Engineer to join the Threat Research and Detection Engineering (TRaDE) team. This role involves developing and maintaining detection logic for Elastic Security, researching emerging threats, and validating detection efficacy.

Key Responsibilities

→Create and refine detection logic across multiple domains (endpoint, cloud, identity, network, web, and email) using Elastic data sources
→Validate rule behavior through functional testing, false-positive review, and iterative tuning
→Evaluate attack paths across domains and contribute to coverage improvements throughout the kill chain
→Analyze multi-source telemetry to uncover detection opportunities
→Support cloud security validation efforts for AWS, Azure, or GCP detections
→Collaborate with senior researchers to test new detection approaches
→Use lightweight simulation tools or scripted tests to generate telemetry and validate detection behavior
→Participate in Elastic Security Labs efforts and community knowledge sharing

Requirements

✓Experience in Generative AI Security
✓Intimate understanding of MITRE ATLAS threat techniques and behaviors
✓Experience in detection engineering, threat research, SOC operations, or related blue-team roles
✓Understanding of core concepts across multiple domains
✓Ability to write or validate detections using EQL, KQL, SQL, or similar query languages
✓Familiarity with MITRE ATT&CK and MITRE ATLAS
✓Strong analytical and problem-solving skills
✓Clear, collaborative communication skills