Senior Threat researcher

SentinelOne

Tel Aviv-Yafo +1 more

Who this role is best for

Strong fit for technical analysts who investigate and dissect malware and adversary behavior, with a focus on Windows and AI integration.

Best fit for

Candidates with 5+ years in malware analysis and threat intelligence, especially Windows-focused experts
— “5+ years of experience in malware analysis, threat intelligence, threat hunting or incident response.”
Individuals who thrive in AI-integrated environments and have experience with agentic AI workflows
— “Experience leveraging agentic AI workflows for malware analysis and detection engineering tasks.”
Professionals with a proven ability to translate complex threat research into actionable security strategies
— “Collaborate with threat intelligence, detection engineering, threat hunting and incident response teams in investigating intrusions and to translate research into actionable detections and defenses.”

Things to consider

The role demands a high level of technical writing and content development ability for internal and external audiences
— “Technical writing & content development skills.”
Candidates should be prepared to present findings to leadership and external partners regularly
— “Present findings to technical teams, leadership, and occasionally external partners or customers.”

How to stand out

Highlight technical reports and Knowledge Base contributions in your resume and interview stories
— “develop and maintain technical reports on threat actor profiles, malware families, and campaign timelines”
Demonstrate hands-on experience with malware analysis and reverse engineering in your portfolio or past work
— “Conduct deep-dive technical analysis of malware samples, attacker infrastructure and protocols.”
Showcase your ability to create detection signatures using YARA, Snort, or Sigma in your application materials
— “Experience with creating signatures (YARA, Snort, Sigma) to identify and track malware families.”
Emphasize any publications or conference speaking engagements related to threat research
— “Proven track record of publication or speaking at security conferences - advantage.”

Pace · Fast PacedCollaboration · HighAutonomy · HighDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

conducting deep-dive technical analysis of malware samples
developing technical reports on threat actor profiles
collaborating with threat intelligence teams

Typical background

cybersecuritymalware analysisthreat intelligence

Skills & requirements

Required

Malware AnalysisThreat IntelligenceReverse Engineering

Preferred

AI Tools And Concepts

Stack & domain

Malware AnalysisReverse EngineeringC/c++PythonPowershellYARASnortSigmaCuriosityContinuous LearningCybersecurityAI

About the role

Original posting from SentinelOne

Our Purpose
At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them becomes more critical than ever. When you join SentinelOne, your work helps protect global enterprises, critical infrastructure, and the technologies shaping tomorrow. If you are motivated by meaningful challenges and want your impact to be real, measurable, and global, you will find purpose here.
About Us
SentinelOne is a company at the intersection of AI and security, pioneering a new operating model for cybersecurity. Our AI-native platform unifies protection across endpoint, cloud, identity, data, and AI systems to deliver autonomous detection and response with clarity and speed. By combining real-time analytics, intelligent automation, and a unified data foundation, we reduce noise, simplify complexity, and empower security teams to focus on what truly matters.
Our teams are builders, problem-solvers, and innovators committed to shaping the future of security. If you are excited to solve hard problems alongside talented, mission-driven people, we invite you to help us build a safer future for humanity.
What Are We Looking For?
We’re looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes.
As a Senior Threat Researcher, you will be tasked with taking apart emerging and known cyber threats - leading in-depth investigations into threat actors, their capabilities, tools and operations, spanning across Endpoint and Cloud domains. This role combines hands-on technical analysis with strategic intelligence production, enabling our ThreatOps teams to protect our customers from adversaries across the ever evolving threat landscape.
What Will You Do?
Primary responsibilities include:
Conduct deep-dive technical analysis of malware samples, attacker infrastructure and protocols.
Track adversary progression, develop and maintain technical reports on threat actor profiles, malware families, and campaign timelines - curate and expand our internal Knowledge Base and IOCs collections.
Collaborate with threat intelligence, detection engineering, threat hunting and incident response teams in investigating intrusions and to translate research into actionable detections and defenses.
Work with our lab teams to improve our internal infrastructure and tooling.
Present findings to technical teams, leadership, and occasionally external partners or customers.
What Skills and Knowledge Will You Bring?
Ideal candidates will have:
5+ years of experience in malware analysis, threat intelligence, threat hunting or incident response.
Deep understanding of the cybersecurity landscape, attack vectors and TTPs, especially on Windows.
Experience in reverse engineering (x86/x64, ARM\ARM64) and malware analysis (statically and dynamically).
Proficiency in C/C++ and scripting languages (Python, Powershell).
Experience with creating signatures (YARA, Snort, Sigma) to identify and track malware families.
Technical writing & content development skills.
Proven track record of publication or speaking at security conferences - advantage.
Experience leveraging agentic AI workflows for malware analysis and detection engineering tasks (reverse engineering, code auditing, signature writing) - advantage.
Knowledge about internal working of EDR products - advantage.
Why SentinelOne?
AI is redefining how the world operates and rewriting the rules of security in real time, and SentinelOne was built for this moment. From day one, we architected an AI-native platform designed to operate at machine speed, not as an add-on to legacy systems but as the foundation itself. If you want to build where innovation and impact move together, this is that place.
We invest in our Sentinels with comprehensive, competitive benefits designed to support you and your family:
Equity & Rewards
Restricted Stock Units (RSUs)
Employee Stock Purchase Plan (ESPP)
Time Off & Wellbeing
Competitive leave benefits
Gender-neutral parental leave
Employee Assistant Program
Workout sessions and a Wellness App
Insurance & Financial Security
Medical and insurance benefits
Pension
Employee Assistance Program (EAP)
Work Perks & Flexibility
Global home office allowance
Mobile phone reimbursement
Study Fund
SentinelOne is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.
SentinelOne participates in the E-Verify Program for all U.S. based roles.

Source: SentinelOne careers