← All roles

Staff Cloud Security Researcher

SentinelOne· Security / Research (Cloud / Cloud Workload Security)
Apply on company site
Hybrid (Global)Full-timePosted 2w ago

About the role

Staff Cloud Workload Security Researcher at SentinelOne focusing on researching cloud attack techniques, evasion against sensors, and driving innovative detection strategies across Windows, Linux, and macOS in Endpoint, Cloud, and Identity contexts.

Responsibilities

  • Proactively look for the newest and most sophisticated attack techniques, deeply research and understand their internals, and emulate these attacks to assess and improve our detection engines.
  • Conduct comprehensive analysis of potential attack paths within diverse systems and networks in cloud environments.
  • Identify and prioritize potential vulnerabilities and weaknesses that could be exploited by cyber adversaries in cloud platforms.
  • Build tools to support detection assessments, create proofs of concept for the newest techniques, and contribute to the design of innovative detection strategies.
  • Work closely with the threat intelligence team and engineering detection teams to provide guidance and highlight gaps in detection and visibility capabilities.

Qualifications

  • 4 or more years of experience in red teaming, security research, or offensive research, with a deep understanding of OS internals (Windows/Linux)
  • Experience in cloud attack path analysis, vulnerability assessment, and threat modeling
  • Familiarity with cloud services, Kubernetes, cloud architecture, and major cloud providers (AWS, GCP, Azure)
  • In-depth understanding of the cloud ecosystem, security principles, services, configurations, best practices, and relevant frameworks
  • Hands-on experience coding in Python and C/C++
  • Understanding of existing EDR internals
  • Experience leveraging agentic AI workflows for detection engineering tasks (reverse engineering, code auditing, signature writing)
  • A proven track record of conference speaking at security conferences or publications is an advantage
  • Experience writing detection signatures or heuristics is an advantage

Skills

Required:Cloud attack path analysisVulnerability assessmentThreat modelingKubernetesCloud providersPythonC/C++
Nice to have:EDR internalsAgentic AI workflows

Benefits

  • Restricted Stock Units (RSUs)
  • Employee Stock Purchase Plan (ESPP)
  • Competitive leave benefits
  • Gender-neutral parental leave
  • Medical and insurance benefits
  • Pension scheme (PPK with a 4% employer contribution)
  • Employee Assistance Program (EAP)
  • Global home office allowance
  • Mobile phone allowance
  • Wellness benefit
Last updated Oct 22, 2026. Interested? Apply on the company site.
SentinelOne logo

About SentinelOne

AI-Powered Enterprise Cybersecurity Platform

SentinelOne unifies AI-powered endpoint, cloud, identity, and data protection—enhanced by our Security Data Lake for seamless and efficient cybersecurity.

CybersecurityAI SecurityEndpoint SecurityCloud SecurityAI-SIEMIdentity SecurityEDRXDR
Company profileWebsite

More open roles at SentinelOne