← All roles

Senior Threat Intelligence Researcher

SentinelOne· Not specified
Apply on company site
Hybrid (Prague/Brno/CZ-SK)€3k/moFull-timePosted 4w ago

About the role

Senior Threat Intelligence Researcher responsible for leading deep-dive investigations into emerging and known threats, synthesizing data into actionable intelligence, and developing refined hunting strategies to preempt threat actor activity.

Responsibilities

  • Synthesize complex data, from internal hunt findings to intelligence from dark web forums, leak sites, and research repositories, into actionable threat briefings and risk assessments for security leadership and senior stakeholders.
  • Lead in-depth, hypothesis-driven threat hunts across internal networks, cloud environments, and endpoints to uncover sophisticated intrusions that evade traditional security controls.
  • Map threat actor footprints internally by pivoting through EDR telemetry.
  • Analyze adversary tactics, techniques, and procedures (TTPs) within the environment, identifying shifts in execution, persistence, and lateral movement.
  • Trace adversary infrastructure externally by pivoting through domain registrations, SSL certificates, and passive DNS.

Qualifications

  • Background in threat research, threat intelligence or threat hunting.
  • Knowledge of the cyber threat landscape, including threat actors and their TTPs.
  • Strong analytical skills with the ability to identify patterns and trends in large datasets.
  • Knowledge of how SentinelOne products operate and how to maximize telemetry.
  • Strong knowledge of YARA and validation best practices.
  • Understanding of software vulnerabilities and internal hunting strategies to track exploitation.
  • Knowledge of MITRE ATT&CK, CISA KEV, EPSS, AMITT, and MISP Galaxy.
  • Knowledge of malware analysis tools and techniques (static/dynamic analysis, sandboxing, debugging).
  • Technical writing and content development skills.
  • Solid understanding of how EDR works (preferred).
  • Relevant certifications (CMA, CREA, or GREM) are preferred.

Skills

Required:Threat intelligence and huntingData analysisYARAMITRE ATT&CK, CISA KEV, EPSS, AMITT, MISP GalaxyMalware analysisTechnical writing

Benefits

  • Salary starting from 3000 EUR/month
  • Annual bonus based on company performance, paid in two installments
  • Equity & Rewards: RSUs, ESPP, Performance-based bonus
  • Time Off & Wellbeing: Flexible time off, 5 weeks PTO, wellness days, sick/nursing leave, parental leave
  • Insurance & Financial Security: Life and disability insurance, Pension contribution, global travel medical insurance, EAP
  • Work Perks & Flexibility: Global home office allowance, meal allowance, hybrid work in Prague/Brno or remote in CZ/SK
  • Wellness & Lifestyle: Wellbeing allowance, MultiSport program, Wellness Coach app
Last updated Oct 22, 2026. Interested? Apply on the company site.
SentinelOne logo

About SentinelOne

AI-Powered Enterprise Cybersecurity Platform

SentinelOne unifies AI-powered endpoint, cloud, identity, and data protection—enhanced by our Security Data Lake for seamless and efficient cybersecurity.

CybersecurityAI SecurityEndpoint SecurityCloud SecurityAI-SIEMIdentity SecurityEDRXDR
Company profileWebsite

More open roles at SentinelOne