Senior Threat researcher

As a Senior Threat Researcher, you will be tasked with taking apart emerging and known cyber threats - leading in-depth investigations into threat actors, their capabilities, tools and operations, spanning across Endpoint and Cloud domains. This role combines hands-on technical analysis with strategic intelligence production, enabling our ThreatOps teams to protect our customers from adversaries across the ever evolving threat landscape.

 

What Will You Do?

Primary responsibilities include: 

• Conduct deep-dive technical analysis of malware samples, attacker infrastructure and protocols.
• Track adversary progression, develop and maintain technical reports on threat actor profiles, malware families, and campaign timelines - curate and expand our internal Knowledge Base and IOCs collections.
• Collaborate with threat intelligence, detection engineering, threat hunting and incident response teams in investigating intrusions and to translate research into actionable detections and defenses.
• Work with our lab teams to improve our internal infrastructure and tooling.
• Present findings to technical teams, leadership, and occasionally external partners or customers.

 

What Skills and Knowledge Will You Bring?

Ideal candidates will have: 

• 5+ years of experience in malware analysis, threat intelligence, threat hunting or incident response.
• Deep understanding of the cybersecurity landscape, attack vectors and TTPs, especially on Windows.
• Experience in reverse engineering (x86/x64, ARM\ARM64) and malware analysis (statically and dynamically).
• Proficiency in C/C++ and scripting languages (Python, Powershell).
• Experience with creating signatures (YARA, Snort, Sigma) to identify and track malware families.
• Technical writing & content development skills.
• Proven track record of publication or speaking at security conferences - advantage.
• Experience leveraging agentic AI workflows for malware analysis and detection engineering tasks (reverse engineering, code auditing, signature writing) - advantage.
• Knowledge about internal working of EDR products - advantage.

 

Why SentinelOne?

AI is redefining how the world operates and rewriting the rules of security in real time, and SentinelOne was built for this moment. From day one, we architected an AI-native platform designed to operate at machine speed, not as an add-on to legacy systems but as the foundation itself. If you want to build where innovation and impact move together, this is that place.

We invest in our Sentinels with comprehensive, competitive benefits designed to support you and your family:

Equity & Rewards

• Restricted Stock Units (RSUs)
• Employee Stock Purchase Plan (ESPP)

Time Off & Wellbeing

• Competitive leave benefits
• Gender-neutral parental leave
• Employee Assistant Program
• Workout sessions and a Wellness App

Insurance & Financial Security

• Medical and insurance benefits
• Pension
• Employee Assistance Program (EAP)

Work Perks & Flexibility

• Global home office allowance
• Mobile phone reimbursement
• Study Fund