← All roles

Staff Cloud Security Researcher

SentinelOne· Security / Research
Apply on company site
Hybrid (Global (remote/hybrid))Full-timePosted 2w ago

About the role

Staff Cloud Workload Security Researcher focused on researching evasions against SentinelOne sensors, tracking the threat landscape, and driving innovative detection research across Windows, Linux, and macOS in cloud, endpoint, and identity contexts.

Responsibilities

  • Proactively look for the newest and most sophisticated attack techniques, deeply research and understand their internals, and emulate these attacks to assess and improve our detection engines.
  • Conduct comprehensive analysis of potential attack paths within diverse systems and networks in cloud environments.
  • Identify and prioritize potential vulnerabilities and weaknesses that could be exploited by cyber adversaries in cloud platforms.
  • Build tools to support detection assessments, create proofs of concept for the newest techniques, and contribute to the design of innovative detection strategies.
  • Work closely with the threat intelligence team and engineering detection teams to provide guidance and highlight gaps in detection and visibility capabilities.

Qualifications

  • Experience in cloud attack path analysis, vulnerability assessment, and threat modeling.
  • Familiarity with cloud services, Kubernetes, cloud architecture, and major cloud providers (AWS, GCP, and Azure).
  • In-depth understanding of the cloud ecosystem, security principles, services, configurations, best practices, and relevant frameworks.
  • 4 or more years of experience in red teaming, security research, or offensive research, with a deep understanding of OS internals (Windows/Linux).
  • Hands-on experience coding in Python and C/C++.
  • Understanding of existing EDR internals.
  • Experience leveraging agentic AI workflows for detection engineering tasks (reverse engineering, code auditing, signature writing).
  • A proven track record of conference speaking at security conferences or publications is an advantage.
  • Experience writing detection signatures or heuristics is an advantage.

Skills

Required:Cloud attack path analysisThreat modelingCloud providers (AWS, GCP, Azure)KubernetesOS internals (Windows/Linux)PythonC/C++
Nice to have:EDR internalsAgentic AI workflowsPublic speaking / publications

Benefits

  • Restricted Stock Units (RSUs)
  • Employee Stock Purchase Plan (ESPP)
  • Competitive leave benefits
  • Gender-neutral parental leave
  • Medical and insurance benefits
  • Pension
  • Employee Assistance Program (EAP)
  • Global home office allowance
  • Monthly home office, internet and mobile phone allowance
  • Meal allowance
  • Transportation allowance
Last updated Oct 22, 2026. Interested? Apply on the company site.
SentinelOne logo

About SentinelOne

AI-Powered Enterprise Cybersecurity Platform

SentinelOne unifies AI-powered endpoint, cloud, identity, and data protection—enhanced by our Security Data Lake for seamless and efficient cybersecurity.

CybersecurityAI SecurityEndpoint SecurityCloud SecurityAI-SIEMIdentity SecurityEDRXDR
Company profileWebsite

More open roles at SentinelOne