Staff Cloud Security Researcher

The role

You will research evasions against sensors and track the offensive tooling landscape. You will emulate sophisticated attack techniques to improve detection engines across Windows, Linux, and macOS.

What you will do

• Proactively look for the newest and most sophisticated attack techniques
• Research and understand attack internals and emulate them to improve detection engines
• Conduct comprehensive analysis of potential attack paths in cloud environments
• Identify and prioritize potential vulnerabilities and weaknesses in cloud platforms
• Build tools to support detection assessments
• Create proofs of concept for the newest techniques
• Contribute to the design of innovative detection strategies
• Work with threat intelligence and engineering detection teams to provide guidance and highlight gaps

Required qualifications

• 4 or more years of experience in red teaming, security research, or offensive research
• Deep understanding of OS internals (Windows/Linux)
• Hands-on experience coding in Python and C/C++
• Understanding of existing EDR internals
• Experience leveraging agentic AI workflows for detection engineering tasks (reverse engineering, code auditing, signature writing)
• Experience in cloud attack path analysis, vulnerability assessment, and threat modeling
• Familiarity with cloud services, Kubernetes, cloud architecture, and major cloud providers (AWS, GCP, and Azure)
• In-depth understanding of the cloud ecosystem, security principles, services, configurations, best practices, and relevant frameworks

Nice to have

• Proven track record of conference speaking at security conferences or publications
• Experience writing detection signatures or heuristics

Benefits

• Restricted Stock Units (RSUs)
• Employee Stock Purchase Plan (ESPP)
• Performance-based bonus
• Flexible time off, on top of the standard 5 weeks PTO
• Paid company wellness days
• Fully paid short-term sick/nursing leave
• Gender-neutral parental leave
• Private medical care benefit
• Life and disability insurance
• Pension Insurance contribution
• Global business travel medical insurance
• Employee Assistance Program (EAP)

About the company

SentinelOne is a company at the intersection of AI and security. Their AI-native platform unifies protection across endpoint, cloud, identity, data, and AI systems.