Senior Manager, Endpoint Protections - Elastic

About the Role

Elastic is looking for a Senior Manager to lead the Endpoint Protections team. This team builds the visibility, prevention, and on-device machine learning capabilities at the core of Elastic Defend. You will lead a globally distributed team, setting the tone for a group that values candid feedback, collaborative learning, and mentorship.

We are looking for a leader who has deep technical roots and can still review designs or write code. You will work in kernel and user mode across Windows, macOS, and Linux to counter sophisticated adversaries.

What You Will Be Doing

• Lead and Grow: Mentor a world-class engineering team, manage career development, and own the hiring pipeline.
• Own the Roadmap: Define investment areas for visibility and protection engines, balancing efficacy, performance, and stability across millions of endpoints.
• Cross-Functional Collaboration: Partner with product managers to deliver high-quality features and ensure your team's work integrates seamlessly with the broader Elastic Security platform.
• Machine Learning Strategy: Direct the team's ML work, including model development, training data quality, and telemetry features.
• Platform Parity: Drive protection parity across Windows, macOS, and Linux, and stay ahead of new hardware architectures.
• External Representation: Represent Elastic in the security community, support team members in publishing research, and engage with customers.

What You Bring

• Leadership Experience: Proven track record managing senior technical individual contributors on a globally distributed team.
• Technical Practitioner: Substantial hands-on experience in security research, analyzing attacker TTPs, and shipping software at scale.
• OS Internals Expertise: Deep knowledge of kernel and user mode (Windows depth preferred, with macOS/Linux experience).
• Reverse Engineering: Hands-on experience with malware analysis and reading disassembly.
• Adversarial Mindset: Ability to anticipate evasion techniques and design for resilience.
• Communication: Strong ability to distill complex technical concepts for both executive and technical audiences.
• Modern Tooling: Experience leveraging AI-assisted development tools to accelerate workflows.

Bonus Points

• Prior ownership of an EDR, EPP, or endpoint security product.
• Published research, patents, or conference speaking experience (e.g., Black Hat, DEF CON).
• Experience leading machine learning engineers in a security context.
• Familiarity with the Elastic Stack (Elasticsearch, Kibana).