← All roles

Senior Threat Intelligence Researcher

SentinelOne
Apply on company site
Hybrid (Remote / Global)Full-timePosted 4w ago

About the role

Senior Threat Intelligence Researcher at SentinelOne focused on leading deep-dive investigations into emerging and known threats, synthesizing intelligence into actionable briefings, and developing refined hunting strategies to stay ahead of adversaries in the AI-native security platform context.

Responsibilities

  • Synthesize complex data, from internal hunt findings to intelligence gathered from dark web forums, leak sites, and research repositories, into actionable threat briefings and risk assessments for security leadership and senior stakeholders.
  • Lead in-depth, hypothesis-driven threat hunts across internal networks, cloud environments, and endpoints to uncover sophisticated intrusions that evade traditional security controls.
  • Map threat actor footprints internally by pivoting through EDR telemetry.
  • Analyze adversary tactics, techniques, and procedures (TTPs) within the environment, identifying shifts in execution, persistence, and lateral movement.
  • Trace adversary infrastructure externally by pivoting through domain registrations, SSL certificates, and passive DNS.

Qualifications

  • Background in threat research, threat intelligence or threat hunting.
  • Knowledge of the cyber threat landscape, including threat actors and their TTPs.
  • Strong analytical skills, with the ability to identify patterns and trends in large datasets.
  • Knowledge of how our products operate internally and how to maximize their telemetry.
  • Strong knowledge of YARA to track new malware families, along with knowledge of validation best practices.
  • Understanding of software vulnerabilities and the ability to implement internal hunting strategies to track their exploitation across the estate.
  • Knowledge of MITRE ATT&CK, CISA KEV, EPSS, AMITT, and MISP Galaxy.
  • Knowledge of malware analysis tools and techniques, including static and dynamic analysis, sandboxing, and debugging.
  • Technical writing and content development skills.
  • Solid technical understanding of how EDR works (preferred).
  • Relevant certifications such as CMA, CREA, or GREM (preferred).

Skills

Required:Threat research / threat huntingThreat intelligenceData analysisTelemetry optimizationYARAVulnerability analysisMITRE ATT&CK / KEV / EPSS / AMITT / MISP GalaxyMalware analysisTechnical writing
Nice to have:EDR fundamentalsSecurity certifications

Benefits

  • Restricted Stock Units (RSUs)
  • Employee Stock Purchase Plan (ESPP)
  • Competitive leave benefits
  • Gender-neutral parental leave
  • Medical and insurance benefits
  • Pension
  • Global home office allowance
  • Wellbeing allowance
  • MultiSport benefit program
Last updated Oct 22, 2026. Interested? Apply on the company site.
SentinelOne logo

About SentinelOne

AI-Powered Enterprise Cybersecurity Platform

SentinelOne unifies AI-powered endpoint, cloud, identity, and data protection—enhanced by our Security Data Lake for seamless and efficient cybersecurity.

CybersecurityAI SecurityEndpoint SecurityCloud SecurityAI-SIEMIdentity SecurityEDRXDR
Company profileWebsite

More open roles at SentinelOne