← All roles

Staff Cloud Security Researcher

SentinelOne· SentinelOne
Apply on company site
Italy€65.6k - €90kFull-timePosted 2w ago

About the role

Staff Cloud Workload Security (CWS) Researcher who researches evasions against sensors, tracks offensive tooling, and drives innovative research across Windows, Linux, and macOS in Endpoint, Cloud, and Identity domains.

Responsibilities

  • Proactively look for the newest and most sophisticated attack techniques, deeply research and understand their internals, and emulate these attacks to assess and improve our detection engines.
  • Conduct comprehensive analysis of potential attack paths within diverse systems and networks in cloud environments.
  • Identify and prioritize potential vulnerabilities and weaknesses that could be exploited by cyber adversaries in cloud platforms.
  • Build tools to support detection assessments, create proofs of concept for the newest techniques, and contribute to the design of innovative detection strategies.
  • Work closely with the threat intelligence team and engineering detection teams to provide guidance and highlight gaps in detection and visibility capabilities.

Qualifications

  • Experience in cloud attack path analysis, vulnerability assessment, and threat modeling.
  • Familiarity with cloud services, Kubernetes, cloud architecture, and major cloud providers (AWS, GCP, and Azure).
  • In-depth understanding of the cloud ecosystem, security principles, services, configurations, best practices, and relevant frameworks.
  • 4 or more years of experience in red teaming, security research, or offensive research, with a deep understanding of OS internals (Windows/Linux).
  • Hands-on experience coding in Python and C/C++.
  • Understanding of existing EDR internals.
  • Experience leveraging agentic AI workflows for detection engineering tasks (reverse engineering, code auditing, signature writing).
  • A proven track record of conference speaking at security conferences or publications is an advantage.
  • Experience writing detection signatures or heuristics is an advantage.

Skills

Required:Cloud attack path analysisCloud services & providersOS internals (Windows/Linux)PythonC/C++
Nice to have:EDR internalsAI workflows for detection engineeringPublic speaking / publications

Benefits

  • Equity & Rewards: Restricted Stock Units (RSUs), Employee Stock Purchase Plan (ESPP)
  • Time Off & Wellbeing: Competitive leave benefits, Gender-neutral parental leave
  • Insurance & Financial Security: Medical and insurance benefits, Pension, Employee Assistance Program (EAP)
  • Work Perks & Flexibility: Global home office allowance, Mobile phone reimbursement
Last updated Oct 22, 2026. Interested? Apply on the company site.
SentinelOne logo

About SentinelOne

AI-Powered Enterprise Cybersecurity Platform

SentinelOne unifies AI-powered endpoint, cloud, identity, and data protection—enhanced by our Security Data Lake for seamless and efficient cybersecurity.

CybersecurityAI SecurityEndpoint SecurityCloud SecurityAI-SIEMIdentity SecurityEDRXDR
Company profileWebsite

More open roles at SentinelOne