← All roles

Senior Threat Intelligence Researcher

SentinelOne· Research / Security Intelligence
Apply on company site
Hybrid (Remote / Global)$0Full-timePosted 4w ago

About the role

Senior threat intelligence professional responsible for leading deep-dive investigations, developing hunting strategies, and providing actionable briefings to senior management to stay ahead of evolving threat actor techniques and infrastructure.

Responsibilities

  • Synthesize complex data from internal hunt findings and external intelligence into actionable threat briefings and risk assessments for security leadership and senior stakeholders.
  • Lead in-depth, hypothesis-driven threat hunts across internal networks, cloud environments, and endpoints to uncover sophisticated intrusions.
  • Map threat actor footprints internally by pivoting through EDR telemetry.
  • Analyze adversary TTPs within the environment, identifying shifts in execution, persistence, and lateral movement.
  • Trace adversary infrastructure externally by pivoting through domain registrations, SSL certificates, and passive DNS.

Qualifications

  • Background in threat research, threat intelligence or threat hunting.
  • Knowledge of cyber threat landscape, including threat actors and their TTPs.
  • Strong analytical skills to identify patterns and trends in large datasets.
  • Knowledge of product telemetry and how to maximize its use.
  • Strong knowledge of YARA and malware tracking, plus validation best practices.
  • Understanding of software vulnerabilities and internal hunting strategy development.
  • Knowledge of MITRE ATT&CK, CISA KEV, EPSS, AMITT, and MISP Galaxy.
  • Knowledge of malware analysis tools and techniques (static/dynamic analysis, sandboxing, debugging).
  • Technical writing and content development skills.
  • Solid understanding of how EDR works (preferred).
  • Relevant certifications such as CMA, CREA, or GREM (preferred).

Skills

Required:Threat intelligenceThreat huntingYARAMITRE ATT&CK
Nice to have:Malware analysis

Benefits

  • Restricted Stock Units (RSUs)
  • Employee Stock Purchase Plan (ESPP)
  • Competitive leave benefits
  • Gender-neutral parental leave
  • Medical and insurance benefits
  • Pension
  • Global home office allowance
  • Wellbeing allowance
  • MultiSport benefit program
Last updated Oct 22, 2026. Interested? Apply on the company site.
SentinelOne logo

About SentinelOne

AI-Powered Enterprise Cybersecurity Platform

SentinelOne unifies AI-powered endpoint, cloud, identity, and data protection—enhanced by our Security Data Lake for seamless and efficient cybersecurity.

CybersecurityAI SecurityEndpoint SecurityCloud SecurityAI-SIEMIdentity SecurityEDRXDR
Company profileWebsite

More open roles at SentinelOne