← All roles

Senior Threat Intelligence Researcher

SentinelOne· Security / Threat Intelligence
Apply on company site
Italy€51.2k - €70kFull-timePosted 4w ago

About the role

Senior Threat Intelligence Researcher responsible for leading deep-dive investigations into emerging and known threats, synthesizing data into actionable intelligence, and developing hunting strategies to counter threat actor tradecraft. Roles include threat hunts across networks, cloud, and endpoints, and tracking adversary infrastructure to stay ahead of evolving attack methods.

Responsibilities

  • Synthesize complex data from internal hunts and external intelligence sources into actionable threat briefings and risk assessments for security leadership and senior stakeholders.
  • Lead in-depth, hypothesis-driven threat hunts across internal networks, cloud environments, and endpoints to uncover sophisticated intrusions that evade traditional security controls.
  • Map threat actor footprints internally by pivoting through EDR telemetry.
  • Analyze adversary TTPs within the environment, identifying shifts in execution, persistence, and lateral movement.
  • Trace adversary infrastructure externally by pivoting through domain registrations, SSL certificates, and passive DNS.

Qualifications

  • Background in threat intelligence or threat hunting.
  • Knowledge of cyber threat landscape, including TTPs of threat actors.
  • Strong analytical skills with ability to identify patterns in large datasets.
  • Knowledge of SentinelOne products and telemetry optimization.
  • Strong knowledge of YARA and malware tracking, plus validation best practices.
  • Understanding of software vulnerabilities and internal hunting strategies to track exploitation.
  • Knowledge of MITRE ATT&CK, CISA KEV, EPSS, AMITT, and MISP Galaxy.
  • Knowledge of malware analysis tools and techniques (static/dynamic analysis, sandboxing, debugging).
  • Technical writing and content development skills.
  • Solid understanding of how EDR works (preferred).
  • Relevant certifications such as CMA, CREA, or GREM (preferred).

Skills

Required:Threat intelligence / threat huntingThreat landscape knowledge (TTPs, actors)Data analysisYARAMalware analysis (static/dynamic)MITRE ATT&CK, CISA KEV, EPSS, AMITT, MISP Galaxy
Nice to have:EDR understanding

Benefits

  • Equity & Rewards: RSUs, Employee Stock Purchase Plan (ESPP)
  • Time Off & Wellbeing: Competitive leave benefits, gender-neutral parental leave
  • Insurance & Financial Security: Medical and insurance benefits, Pension, Employee Assistance Program (EAP)
  • Work Perks & Flexibility: Global home office allowance, Mobile phone reimbursement
Last updated Oct 22, 2026. Interested? Apply on the company site.
SentinelOne logo

About SentinelOne

AI-Powered Enterprise Cybersecurity Platform

SentinelOne unifies AI-powered endpoint, cloud, identity, and data protection—enhanced by our Security Data Lake for seamless and efficient cybersecurity.

CybersecurityAI SecurityEndpoint SecurityCloud SecurityAI-SIEMIdentity SecurityEDRXDR
Company profileWebsite

More open roles at SentinelOne