← All roles

Senior Threat Intelligence Researcher

SentinelOne· Security / Threat Intelligence
Apply on company site
RemoteFull-timePosted 4w ago

About the role

Senior level role focused on leading deep-dive investigations into emerging and known threats, synthesizing intelligence for senior leadership, developing refined hunting strategies, and tracking adversary infrastructure to counter threat actor tradecraft.

Responsibilities

  • Synthesize complex data from internal hunt findings and external intelligence into actionable threat briefings and risk assessments for security leadership and senior stakeholders.
  • Lead in-depth, hypothesis-driven threat hunts across internal networks, cloud environments, and endpoints to uncover sophisticated intrusions.
  • Map threat actor footprints internally by pivoting through EDR telemetry.
  • Analyze adversary TTPs within the environment, identifying shifts in execution, persistence, and lateral movement.
  • Trace adversary infrastructure externally by pivoting through domain registrations, SSL certificates, and passive DNS.

Qualifications

  • A background in threat research, threat intelligence or threat hunting.
  • Knowledge of the cyber threat landscape, including threat actors and their TTPs.
  • Strong analytical skills, with the ability to identify patterns and trends in large datasets.
  • Knowledge of how SentinelOne products operate internally and how to maximize telemetry.
  • Strong knowledge of YARA to track new malware families, and knowledge of validation best practices.
  • Understanding of software vulnerabilities and the ability to implement internal hunting strategies to track their exploitation across the estate.
  • Knowledge of MITRE ATT&CK, CISA KEV, EPSS, AMITT, and MISP Galaxy.
  • Knowledge of malware analysis tools and techniques, including static and dynamic analysis, sandboxing, and debugging.
  • Technical writing and content development skills.
  • Solid technical understanding of how EDR works.
  • Relevant certifications (e.g., CMA, CREA, GREM) are preferred.

Skills

Required:Threat huntingThreat intelligenceData analysisYARAMITRE ATT&CK
Nice to have:Malware analysis

Benefits

  • Equity & Rewards: RSUs, ESPP
  • Time Off & Wellbeing: Competitive leave benefits, gender-neutral parental leave
  • Insurance & Financial Security: Medical and insurance benefits, pension
  • Work Perks & Flexibility: Global home office allowance
  • Wellness & Lifestyle: Wellbeing allowance, MultiSport benefit program
Last updated Oct 22, 2026. Interested? Apply on the company site.
SentinelOne logo

About SentinelOne

AI-Powered Enterprise Cybersecurity Platform

SentinelOne unifies AI-powered endpoint, cloud, identity, and data protection—enhanced by our Security Data Lake for seamless and efficient cybersecurity.

CybersecurityAI SecurityEndpoint SecurityCloud SecurityAI-SIEMIdentity SecurityEDRXDR
Company profileWebsite

More open roles at SentinelOne