VP of Threat Research (Security Intelligence)

Join Elastic Security as the VP of Threat Research, where you will shape the research agenda for our platform and serve as the public voice of our work. In this senior individual contributor leadership role, you will set priorities across detection engineering, threat research, endpoint protections, and security ML. You will also represent Elastic with customers, at industry conferences, with press and analysts, and in the broader security research community.

• Definir la agenda de investigación y detección en SIEM, endpoint, investigación de amenazas y ML de seguridad.
• Establecer el estándar de calidad para lo que Elastic detecta, previene y publica, y decidir dónde debe invertir el equipo.
• Actuar como la cara externa de la organización con clientes, analistas, prensa y la comunidad de seguridad.
• We are looking for someone who wants to elevate Elastic’s research brand, guide the technical agenda, and help define how the industry thinks about modern threat detection and prevention
• A clear belief in open, transparent security and the value of publishing detections and research openly
• Deep credibility in threat research, detection engineering, endpoint security, or security ML
• Strong judgment and the ability to lead through influence, expertise, and vision
• Experience setting strategy across technical security domains and translating that into clear priorities
• Strong public communication skills and enthusiasm for customer engagement, speaking, and industry visibility
• Willingness to travel regularly for customer meetings, conferences, and external engagements
• Hands-on technical experience doing the work yourself, not only leading teams
• The ability to operate as a senior IC leader who sets direction through technical depth and strong judgment
• A thoughtful point of view on AI in security, including both its promise and its risks
• Experience leading or contributing to publicly recognized threat research or detection content
• Familiarity with open detection ecosystems, GitHub-based research workflows, or community-driven security programs
• Background working with malware models, behavioral detections, or small language models in security use cases
• Experience spanning both endpoint protections and SIEM detections
• Existing presence in the security community through talks, publications, or media engagement