Offensive Security Researcher

The role

You will study how attackers break into cloud, identity, and AI environments. You will reproduce attacks in a lab and turn that knowledge into detection content for the SentinelOne platform.

What you will do

• Research vulnerabilities and misconfigurations in internet-exposed services.
• Reproduce attacks in a lab and write exploit templates.
• Research attack paths in AWS, Azure, and GCP.
• Research attacks against Entra ID and Active Directory.
• Research attacks on AI applications, agents, and AI infrastructure.
• Use AI and agentic systems to speed up research.
• Write research notes, public blogs, threat advisories, and conference talks.

Required qualifications

• 2 to 4 years of hands-on experience in offensive security, security research, or detection engineering.
• Hands-on depth in at least two of the following areas: exposure and exploitation, cloud, identity, or AI security.
• Detection engineering skills to turn attacks into detection logic.
• Strong Python scripting skills for PoCs, lab automation, and data analysis.
• Responsible research habits, including safe lab practice and coordinated disclosure.

Nice to have

• Public work such as CVEs, blog posts, detection rules, CTF results, bug bounty findings, or talks
• Experience with a query language such as KQL, SPL, or SQL
• Experience building or using AI and LLM-assisted workflows for security research or detection engineering
• Familiarity with Shodan, Censys, ExploitDB, BloodHound, Pacu, and Stratus Red Team
• Certifications such as OSCP, CRTP, or similar cloud and AI certifications

Benefits

• Restricted Stock Units (RSUs)
• Employee Stock Purchase Plan (ESPP)
• Competitive leave benefits
• Gender-neutral parental leave
• Medical and insurance benefits
• Employee Assistance Program (EAP)
• Global home office allowance
• Internet allowance
• LinkedIn Learning license
• Social Connect program
• Food allowance (Bangalore office)
• Meal vouchers (Sodexo)

About the company

SentinelOne is a company at the intersection of AI and security. Their AI-native platform unifies protection across endpoint, cloud, identity, data, and AI systems.