> Markdown version of [/jobs/ext/3116315-senior-manager-endpoint-protections](https://www.wearedevelopers.com/jobs/ext/3116315-senior-manager-endpoint-protections). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Manager, Endpoint Protections

- **Company:** Elastic
- **Location:** Valencia, Spain
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Apple Mac Systems, Collaborative Learning, Linux, Machine Learning, Reverse Engineering, Malware, Operating System Security
- **Published:** September 27, 2026
- **Apply:** https://www.buscojobs.com.es/senior-manager-endpoint-protections-en-valencia-ID-372563434

## About the Role

Requisitos principales People-leadership experience with globally distributed teams
Hands-on security research background (TTPs, malware analysis)
Strong OS internals knowledge (kernel and user mode; Windows prioritized)
Experience with reverse engineering and evaluating research findings
Adversarial mindset focused on resilient protection design
Clear technical and executive communication skills
Experience with AI-assisted development tools to accelerate feature development
Flexibility to rotate across projects and collaborate across teams
curiosity
collaborative learning
mentorship
OS kernel/user-mode internals expertise (Windows prioritized)
Security research, malware analysis, reverse engineering
Protection engineering for endpoints (EDR/EPP)

## Description

OverviewIn this role you lead a global engineering team focused on endpoint protections, building visibility, prevention, and on-device ML for Elastic Defend across Windows, macOS, and Linux. You guide research and engineering, shaping the roadmap, and ensuring high-quality features that scale to millions of endpoints. You work cross-functionally with product managers and other teams to extend protection capabilities and drive secure, performant deployments. You will also represent the team in conferences and customer interactions, contributing to Elastic Security's leadership in the field.Compensaciones / Beneficios competitive payhealth coverage for familyflexible locations and schedulesgenerous vacation daysdonation matching up to ****volunteer hours (up to 40 per year) , parental leave (min 16 weeks)Responsabilidades Lead and grow a globally distributed engineering team; mentor senior researchers in endpoint internals, prevention, and MLOwn the roadmap, balance investment across visibility and protection engines, and deliver on release timelinesCollaborate with product managers to define requirements and land features on scheduleIntegrate team work with the broader Elastic Security product, enabling cross-product detections and protectionsDirect machine learning efforts: model development, data quality, telemetry features, and alignment with the ML strategyEnsure cross-platform protection parity (Windows focus, plus macOS/Linux) and maintain vendor relationships for OS security APIsRepresent the team externally: speak at conferences, publish research, engage with customers and partnersRequisitos principales People-leadership experience with globally distributed teamsHands-on security research background (TTPs, malware analysis)Strong OS internals knowledge (kernel and user mode; Windows prioritized)Experience with reverse engineering and evaluating research findingsAdversarial mindset focused on resilient protection designClear technical and executive communication skillsExperience with AI-assisted development tools to accelerate feature developmentFlexibility to rotate across projects and collaborate across teamscuriositycollaborative learningmentorshipOS kernel/user-mode internals expertise (Windows prioritized)Security research, malware analysis, reverse engineeringProtection engineering for endpoints (EDR/EPP)


## Related Videos

- [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Introduction to Azure Machine Learning](https://www.wearedevelopers.com/videos/368-introduction-to-azure-machine-learning)
- [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)