> Markdown version of [/jobs/ext/4598241-manager-endpoint-protections](https://www.wearedevelopers.com/jobs/ext/4598241-manager-endpoint-protections). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Manager, Endpoint Protections

- **Company:** Número De
- **Location:** Spain
- **Contract:** Permanent contract
- **Skills:** Training Data, Microsoft Windows, Application Programming Interfaces (APIs), Apple Mac Systems, Software Debugging, Linux, Elasticsearch, Machine Learning, Reverse Engineering, Malware, Kibana, Operating System Security
- **Published:** November 6, 2026
- **Apply:** https://www.adzuna.es/details/5952795294

## About the Role

* People-leadership experience managing senior technical individual contributors on a globally distributed team. You lead with curiosity rather than authority, actively solicit feedback, and have a track record of growing people, not just shipping releases.
 * You have been a practitioner. Substantial hands-on experience as a security researcher before moving into leadership: analyzing attacker tactics, techniques, and procedures (TTPs), building the protections that counter them, and shipping into software that runs on customer machines at scale.
 * Operating system internals knowledge, in both kernel and user mode, earned hands-on rather than through oversight, and deep enough to reason about undocumented behavior and challenge a design on its technical merits. Windows depth is what we need most, with macOS or Linux close behind.
 * Hands-on reverse engineering and malware analysis experience. You have done this work yourself, and can still read a disassembly, assess a research finding on its merits, and judge which threats warrant investment.
 * An adversarial instinct. You anticipate how a protection will be evaded before it ships, and hold the team to designing for resilience rather than for the proof of concept in front of them.
 * Clear communication skills, comfortable writing for technical and executive audiences and distilling deeply technical work for non-expert stakeholders.
 * Motivation to thrive in a distributed, autonomous environment, with a genuine passion for protecting customers from real-world adversaries.
 * Demonstrated experience leveraging AI-assisted development tools to accelerate feature development, debug complex systems, and optimize existing codebases.
 * You possess the ability to comfortably rotate across projects, collaborate across functions and teams, and seamlessly adapt to evolving team structures.

Bonus Points

 * Prior ownership of an EDR, EPP, or other endpoint security product.
 * Personal research output: published vulnerabilities, patents, in-depth technical writing, or conference talks.
 * Experience leading machine learning engineers working on security problems.
 * Experience partnering with product engineering teams to take research prototypes through to GA release.
 * Conference speaking experience (e.g., Black Hat, DEF CON, CODE BLUE, Virus Bulletin).
 * Familiarity with the Elastic Stack (Elasticsearch, Kibana) and Elastic Security.

## Description

* Connect your team's work to the rest of Elastic Security. Every event source your team adds unlocks new detection and protection capabilities across the product. Invest in the joint planning, working relationships, and shared accountability that get your team's work into customers' hands.
 * Direct the team's machine learning work. Set direction on model development, training data quality, and the telemetry features those models depend on, and connect that work to the broader machine learning strategy across Elastic Security.
 * Drive cross-platform protection parity. Bring the depth Elastic has on Windows to macOS and Linux, keep the team ahead of new hardware architectures, and sustain the platform vendor relationships that give you early access to emerging operating system security APIs.
 * Represent the team externally. Support your engineers in presenting at conferences and publishing on Elastic Security Labs, engage with customers and partners on protection capabilities, and be a credible voice for Elastic in the endpoint security community.