Senior Threat Intelligence Researcher, SentinelOne
+ Restricted Stock Units
AI-powered enterprise cybersecurity platform
Be an early applicant
AI-powered enterprise cybersecurity platform
1001+ employees
Be an early applicant
+ Restricted Stock Units
1001+ employees
Company mission
To give the advantage to those who secure our future.
Role
Who you are
- A background in threat research, threat intelligence or threat hunting
- Knowledge of the cyber threat landscape, including threat actors and their tactics, techniques, and procedures (TTPs)
- Strong analytical skills, with the ability to identify patterns and trends in large datasets
- Knowledge of how our products operate internally and how to maximize their telemetry
- Strong knowledge of YARA to track new malware families, along with knowledge of validation best practices
- An understanding of software vulnerabilities and the ability to implement internal hunting strategies to track their exploitation across the estate
- Knowledge of MITRE ATT&CK, CISA KEV, EPSS, AMITT, and MISP Galaxy
- Knowledge of malware analysis tools and techniques, including static and dynamic analysis, sandboxing, and debugging
- Technical writing and content development skills
- A solid technical understanding of how EDR works is preferred
- Relevant certifications, such as Certified Malware Analyst (CMA), Certified Reverse Engineering Analyst (CREA), or GIAC Certified Malware Reverse Engineer (GREM), are preferred
What the job involves
- As a Senior Threat Intelligence Researcher, you will be tasked with leading deep-dive investigations into both emerging and known threats, while maintaining a vigilant watch over malware developments to ensure defenses remain a step ahead of evolving attack methods
- You will synthesize complex data into actionable intelligence and provide senior management with the clear briefings necessary to understand and mitigate potential risks
- You will also develop refined hunting strategies to adapt to and anticipate shifts in threat actor tactics and techniques, and track adversary infrastructure to effectively counteract shifts in threat actor tradecraft through detail-oriented investigation
- Synthesize complex data, from internal hunt findings to intelligence gathered from dark web forums, leak sites, and research repositories, into actionable threat briefings and risk assessments for security leadership and senior stakeholders
- Lead in-depth, hypothesis-driven threat hunts across internal networks, cloud environments, and endpoints to uncover sophisticated intrusions that evade traditional security controls
- Map threat actor footprints internally by pivoting through EDR telemetry
- Analyze adversary tactics, techniques, and procedures (TTPs) within the environment, identifying shifts in execution, persistence, and lateral movement
- Trace adversary infrastructure externally by pivoting through domain registrations, SSL certificates, and passive DNS
Our take
Cybercriminals are now leveraging the power of automation to make the current threat landscape too advanced for a lot of traditional antivirus software. SentinelOne is a cybersecurity company that matches this automation with machine learning-focused software designed to help businesses defend against online attacks.
The company has expanded beyond endpoint security into a broader AI-powered cybersecurity platform spanning endpoint, cloud, identity, and IT operations. This gives SentinelOne access to a larger enterprise market, although it also it also places the company in direct competitions with established cybersecurity leaders, including its biggest rival, CrowdStrike.
As cyberattacks become increasingly automated, the company is expanding its capabilities beyond detection to include AI-driven threat response, helping security teams contain attacks more quickly. While it still trails larger rival CrowdStrike in scale, SentinelOne is investing in platform expansion and automation to compete for enterprises looking to consolidate their cybersecurity into a single solution.
Steph
Company Specialist at Welcome to the Jungle
Insights
61% employee growth in 12 months
Company
Funding (last 2 of 9 rounds)
Feb 2021
$100m
LATE VC
Nov 2020
$267m
LATE VC
Total funding: $798.5m
Company benefits
- Medical, dental, and vision coverage
- Employee assistance program
- Gym reimbursement
- Incentive-based challenges
- Mental health and mindfulness
- Unlimited Time Off
- Grandparent Leave
- Volunteer Time Off
- Paid Sick Time
- Paid Holidays
- 16 weeks Gender-Neutral Parental Leave
- Restricted Stock Unit Program
- Flexible Spending Accounts
- Life Insurance
- Short and Long Term Disability Insurance
- Team building activities
- Celebrations and social gatherings
- Community volunteering events
- Global all hands and local town hall events
Company HQ
Old Mountain View, Mountain View, CA
Leadership
Tomer Weingarten
(Co-Founder & CEO)Tomer began their career in Software Development at Mckit Systems prior to co-founding dPolls and Carambola Media. They left their position as VP of Products at Toluna in December 2012 to found SentinelOne in January 2013, where they have served as the CEO since.
Sonalee Parekh
(CFO)Prior to joining SentinelOne in 2026, Sonalee was the CFO at Asana and RingCentral. They also held senior roles at Hewlett Packard Enterprise, Jefferies, RBC Capital, Markets, Barclays Capital and Goldman Sachs.
Barry Padgett
(COO & President)Barry joined SentinelOne in 2025 as CGO before briefly serving as the CFO then moving into their current role as COO. Previously they spent 4 years at Amperity as COO and CEO and 1 year at Stripe as CRO.
Share this job
View 59 more jobs at SentinelOne