Senior Threat researcher

The role

You will conduct deep-dive technical analysis of malware samples, attacker infrastructure, and protocols. You will track adversary progression and collaborate with threat intelligence, detection engineering, threat hunting, and incident response teams.

What you will do

• Conduct deep-dive technical analysis of malware samples, attacker infrastructure and protocols.
• Track adversary progression.
• Develop and maintain technical reports on threat actor profiles, malware families, and campaign timelines.
• Curate and expand internal Knowledge Base and IOCs collections.
• Collaborate with threat intelligence, detection engineering, threat hunting and incident response teams.
• Translate research into actionable detections and defenses.
• Work with lab teams to improve internal infrastructure and tooling.
• Present findings to technical teams, leadership, and occasionally external partners or customers.

Required qualifications

• 5+ years of experience in malware analysis, threat intelligence, threat hunting or incident response.
• Deep understanding of the cybersecurity landscape, attack vectors and TTPs, especially on Windows.
• Experience in reverse engineering (x86/x64, ARM\ARM64) and malware analysis (statically and dynamically).
• Proficiency in C/C++ and scripting languages (Python, Powershell).
• Experience with creating signatures (YARA, Snort, Sigma) to identify and track malware families.
• Technical writing & content development skills.

Nice to have

• Proven track record of publication or speaking at security conferences
• Experience leveraging agentic AI workflows for malware analysis and detection engineering tasks (reverse engineering, code auditing, signature writing)
• Knowledge about internal working of EDR products

Benefits

• Restricted Stock Units (RSUs)
• Employee Stock Purchase Plan (ESPP)
• Competitive leave benefits
• Gender-neutral parental leave
• Employee Assistant Program
• Workout sessions and a Wellness App
• Medical and insurance benefits
• Pension
• Global home office allowance
• Mobile phone reimbursement
• Study Fund

About the company

SentinelOne is a company at the intersection of AI and security, pioneering a new operating model for cybersecurity. Their AI-native platform unifies protection across endpoint, cloud, identity, data, and AI systems.