Staff Windows Security Researcher, SentinelOne
+ Stock Options
More information about location
Autonomous cybersecurity platform
Job no longer available
Autonomous cybersecurity platform
1001+ employees
Job no longer available
+ Stock Options
More information about location
1001+ employees
Company mission
To defeat every attack, every second, of every day.
Role
Who you are
- 5+ years of security research experience
- Windows Kernel development and/or research
- Good understanding of vulnerabilities and exploits
- Excellent and deep understanding of Windows Internals (both UM and KM) -
- Excellent understanding how core system components (Process and Threads, IPC, tracing, Security, Virtual Memory, and more) work behind the scenes
- Ability to perform both offensive and defensive security research
- Proven experience (at least 3 years) with code-level malware analysis (statically and dynamically) and reverse engineering (x86/x64)
- Experience and familiarity with the malware world, e.g., how the malware operates, techniques, infamous families
- Experienced with analysis tools, such as IDA, WinDBG, SysInternals, and more
- Experienced with C, C++, and Python programming
- Independent - capable of learning new topics alone and working independently
- Team player - the job will require you to coordinate and collaborate your work with other entities in the company
- Good understanding of existing EDR, EPP, and AV internals
- Knowledge and/or experience developing bypasses or self-protection mechanisms for EDR, EPP, and AV technologies
What the job involves
- We are looking for talented security researchers, people who look at the world differently, who explore, "hunt" and live to beat the system and challenge it. . People who are in pursuit of outsmarting the malware and overcoming it.
- You’ll be part of an exceptional research team that will ensure we provide the best detection, protection, and visibility capabilities to our customers at any given time
- The team leads the vulnerabilities, exploits and anti-tampering research for all of our security products under all platforms
- The team does it by performing in-depth analysis and research of vulnerabilities and exploits, while also being responsible for closing the loop through the development and deployment of detection assets to millions of endpoints across the globe
- You’ll be working closely with other detection teams to ensure our customers get the best security products they can. Your time will be focus on research and detection & protection assets
- Assessing and evaluating our detection and protection coverage against in the wild vulnerabilities, exploits, and anti-tampering techniques
- Closing the loop by conducting research to discover and implement innovative solutions for these security challenges
- Initiate and propose new features and capabilities, leveraging personal experience and expertise in security research
- Perform strategic long-term research projects that involve deep research of OS internals, new detection techniques, and novel threats
- Continually learn about emerging vulnerabilities, exploits, threats, techniques, and new technologies on a regular basis
- As a security research expert, you’ll collaborate with many teams to help and support their work using your expertise, knowledge, or research
- You’ll be responsible for developing the new detection content for all of our engines that will improve our detection, protection, and visibility, reaching all of our millions of endpoints across the globe
- You’ll be responsible for the quality and accuracy of the deliverables that you’ll create and be accountable for them
- You’ll create, maintain, and improve existing infrastructure and tools that are being used by the team
- You will also be encouraged to write white papers, blogs, and articles (but only if you wish to)
Our take
Cybercriminals are now leveraging the power of automation to make the current threat landscape too advanced for a lot of legacy antivirus software. SentinelOne is a cybersecurity company that matches this automation with machine learning-focused software designed to help businesses defend against online attacks.
The company expanded the scope of its business from the endpoint security market to three markets valued at a combined $30 billion, including the corporate endpoint security and IT operations management markets. This gives SentinelOne a bigger potential customer base, although it also puts them in direct competition with more focused cybersecurity companies, in addition to its biggest competitor, CrowdStrike.
When the company went public in 2021, it made financial headlines as the highest-valued cybersecurity IPO ever, which gave SentinelOne a market capitalisation of $10 billion. However, it's since fallen to around $ 4 billion. It has subsequently launched S Ventures, a $100M fund, through which SentinelOne invests in cybersecurity startups and has expanded its partnership with major tax firm KPMG to accelerate cyber investigations and responses to threats.
Steph
Company Specialist at Welcome to the Jungle
Insights
61% employee growth in 12 months
Company
Funding (last 2 of 9 rounds)
Feb 2021
$100m
LATE VC
Nov 2020
$267m
LATE VC
Total funding: $800m
Company benefits
- Incentive-based Wellness Challenges
- Medical, Dental & Vision
- Gym Reimbursement
- Career Wellness Perks
- Mental Health & Mindfulness
- Paid Parental Leave
- 401k
- Flexible Spending Accounts
- Short & Long Term Disability Insurance
- Employee Assistance Program
- Life Insurance
- Unlimited Time Off
- Paid Sick Time
- Paid Holidays
- Happy Hours
- Parties & Celebrations
- Team Building Activities
- All-Hands & Town Hall Gatherings
Company HQ
Old Mountain View, Mountain View, CA
Leadership
Tomer Weingarten
(Co-Founder & CEO)They started their career in Software Development at Mckit Systems prior to co-founding dPolls and Carambola Media. They left their position as VP of Products at Toluna in December 2012 to found SentinelOne in January 2013, where they serve as CEO.
Share this job
View 26 more jobs at SentinelOne