← All roles

Senior Threat Intelligence Researcher

SentinelOne
Apply on company site
Hybrid (Remote/Global)Full-timePosted 4w ago

About the role

Senior Threat Intelligence Researcher at SentinelOne focusing on leading deep-dive investigations into emerging and known threats, synthesizing data into actionable intelligence, and developing refined hunting strategies to counter threat actor tactics and infrastructure.

Responsibilities

  • Synthesize complex data from internal hunt findings and external intelligence sources (dark web, leak sites, research repositories) into actionable threat briefings and risk assessments for security leadership and senior stakeholders.
  • Lead in-depth, hypothesis-driven threat hunts across internal networks, cloud environments, and endpoints to uncover sophisticated intrusions.
  • Map threat actor footprints internally by pivoting through EDR telemetry.
  • Analyze adversary TTPs within the environment and identify shifts in execution, persistence, and lateral movement.
  • Trace adversary infrastructure externally by pivoting through domain registrations, SSL certificates, and passive DNS.

Qualifications

  • Background in threat research, threat intelligence or threat hunting.
  • Knowledge of cyber threat landscape, including threat actors and their TTPs.
  • Strong analytical skills to identify patterns in large datasets.
  • Knowledge of how SentinelOne products operate and maximize telemetry.
  • Strong knowledge of YARA and malware tracking, plus validation best practices.
  • Understanding of software vulnerabilities and ability to implement internal hunting strategies to track exploitation.
  • Knowledge of MITRE ATT&CK, CISA KEV, EPSS, AMITT, and MISP Galaxy.
  • Knowledge of malware analysis tools and techniques (static/dynamic analysis, sandboxing, debugging).
  • Technical writing and content development skills.
  • Solid technical understanding of how EDR works (preferred).
  • Relevant certifications (CMA, CREA, or GREM; preferred).

Skills

Required:Threat intelligence and hunting methodologiesThreat data synthesis and reportingTTP analysisYARAMalware analysisMITRE ATT&CK / KEV / EPSS / AMITT / MISP GalaxyEDR telemetry

Benefits

  • RSUs
  • ESPP
  • Competitive leave benefits
  • Gender-neutral parental leave
  • Medical and insurance benefits
  • Pension
  • Global home office allowance
  • Wellbeing allowance
  • MultiSport benefit program
Last updated Oct 22, 2026. Interested? Apply on the company site.
SentinelOne logo

About SentinelOne

AI-Powered Enterprise Cybersecurity Platform

SentinelOne unifies AI-powered endpoint, cloud, identity, and data protection—enhanced by our Security Data Lake for seamless and efficient cybersecurity.

CybersecurityAI SecurityEndpoint SecurityCloud SecurityAI-SIEMIdentity SecurityEDRXDR
Company profileWebsite

More open roles at SentinelOne