Staff Threat Intelligence Engineer, SentinelOne
SentinelLabs
Offers employee stock plan in the form of grant of RSUs (restricted stock units) and yearly bonus depending on the performance of the company, paid out in 2 installments
More information about location
Autonomous cybersecurity platform
Be an early applicant
Autonomous cybersecurity platform
1001+ employees
Be an early applicant
Offers employee stock plan in the form of grant of RSUs (restricted stock units) and yearly bonus depending on the performance of the company, paid out in 2 installments
More information about location
1001+ employees
Company mission
To defeat every attack, every second, of every day.
Role
Who you are
- Expertise working with threat intelligence platforms, with a strong understanding of how to leverage these platforms for data enrichment and threat intelligence automation
- A solid understanding of threat hunting processes and the ability to codify these processes into repeatable, scalable pipelines that enhance the efficacy of threat research efforts
- Strong analytical skills, capable of dissecting complex problems, synthesizing actionable information from diverse data sources, and finding opportunities for novel correlation
- Experience in software development, with strong proficiency in Python and/or Go, especially in developing and maintaining tools for security applications
- Comfort with rapidly prototyping and iterating on tools to ensure they meet the evolving needs of threat hunters and security researchers
- Knowledge of security telemetry data management, including the collection, analysis, storage, tagging, and enrichment of indicators of compromise and associated data sources such as VirusTotal Intelligence/Stairwell, and types like passive DNS, netflow, and scanning
- Excellent communication and collaboration skills, able to work effectively with cross-functional teams and surmise technical requirements from diverse stakeholders
What the job involves
- We are looking for a Staff Threat Intelligence Engineer to join the SentinelLabs team
- This role is designed for a highly skilled, self-directed engineer who excels in programming and analytical problem-solving
- As a key developer of our threat intelligence tooling, you will work closely with a world-class team threat hunters and security researchers to produce innovative tools that automate, enhance, curate, and expand our team's capabilities
- Your expertise will be pivotal in navigating various technology stacks and rapidly prototyping tools to codify threat hunting processes into a repeatable pipeline
- The systems and tools you develop will be instrumental in enabling threat hunting, telemetry enrichment, and data curation, supporting diverse stakeholders across SentinelOne
- Collaborating closely with threat hunters and security researchers to identify their needs, translating these into technical specifications for tool development
- Developing (using Python and Golang) and integrating tools, incorporating external enrichments, custom internal tools, and existing power ups to meet research requirements
- Rapidly prototyping and refining tools to ensure they effectively support threat hunting processes and are seamlessly integrated into a repeatable pipeline
- Designing and implementing systems for telemetry enrichment and data curation to streamline the collection, analysis, storage, tagging, and enrichment of indicators of compromise and related data
- Codifying threat hunting processes to maximize the value of diverse and unique data sources, meaningfully contributing to SentinelLabs threat research
- Taking care of the infrastructure, and operational and deployment aspects for these tools and systems - using AWS, Docker Swarm and in future also Kubernetes
Our take
Cybercriminals are now leveraging the power of automation to make the current threat landscape too advanced for a lot of legacy antivirus software. SentinelOne is a cybersecurity company that matches this automation, with machine learning-focused software that is built to help businesses battle online attacks.
The company expanded the scope of its business from the endpoint security market to three markets valued at a combined $30 billion, including the corporate endpoint security and IT operations management markets. This gives SentinelOne a bigger potential customer base, although also puts them in direct competition with more focused cybersecurity companies, in addition to its biggest competitor, CrowdStrike.
When the company went public, it made financial headlines as the highest-valued cybersecurity IPO ever, which gave SentinelOne a market cap of $10B, though it's now fallen to around $4B. It has subsequently launched S Ventures, a $100M fund, through which SentinelOne invests in cybersecurity startups and has expanded its partnership with major tax firm KPMG to accelerate cyber investigations and responses to threats.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 9 rounds)
Feb 2021
$100m
LATE VC
Nov 2020
$267m
LATE VC
Total funding: $792.9m
Company benefits
- Incentive-based Wellness Challenges
- Medical, Dental & Vision
- Gym Reimbursement
- Career Wellness Perks
- Mental Health & Mindfulness
- Paid Parental Leave
- 401k
- Flexible Spending Accounts
- Short & Long Term Disability Insurance
- Employee Assistance Program
- Life Insurance
- Unlimited Time Off
- Paid Sick Time
- Paid Holidays
- Happy Hours
- Parties & Celebrations
- Team Building Activities
- All-Hands & Town Hall Gatherings
Company values
- Trust: Be dependable. Conduct yourself with highest integrity at all times
- Community: Be kind to one another. Think about how your actions will affect others. Together with your team you can achieve more
- Accountability: Be reliable in all your actions and words. Put customers first. Be the owner!
- Relentlessness: Act with unwavering purpose and determination in everything you do
- OneSentinel: Be passionate about driving team success and collaboration across SentinelOne
- Ingenuity: Encourage innovative approaches to problem-solving & market leadership. Embrace diverse perspectives. Hustle!
Company HQ
Old Mountain View, Mountain View, CA
Articles
Leadership
Tomer Weingarten
(CEO)They started their career in Software Development at Mckit Systems prior to co-founding dPolls and Carambola Media. They left their position as VP of Products at Toluna in December 2012 to found SentinelOne in January 2013, where they serve as CEO.
Share this job
View 32 more jobs at SentinelOne