DFIR Analyst — 24/7 Global Incident Response (AI Security)

SentinelOne, Inc.; Poznań; On-site; PLN 430,000 - 665,000; Full time

Benefits offered by this job

Equity (RSUs)

Employee Stock Purchase Plan (ESPP)

Competitive leave benefits

Gender-neutral parental leave

Medical and insurance benefits

Global home office allowance

EAP

Job summary

SentinelOne is looking for a DFIR Analyst to join the Digital Forensics and Incident Response team. You will perform hands-on forensic analysis, threat hunting, and rapid breach response for global enterprises across endpoints, networks, and cloud environments.

The role requires rigorous evidence-backed conclusions and clear documentation. This position involves on-call duties, collaborating with Technical Leads, and producing customer-facing reports.

Qualifications

• Bachelor's or master's in digital forensics, cybersecurity, CS, or equivalent.
• 2+ years of hands-on digital forensics, incident response, or threat hunting.
• Experience analyzing Windows forensics artifacts and chain-of-custody practices.
• Familiarity with memory analysis, cloud environments, and malware basics.

Responsibilities

• Conduct EDR-driven incident response across endpoint, network, and cloud.
• Perform vendor-agnostic forensic analysis during incidents.
• Preserve and document forensic evidence following chain-of-custody.
• Assist in case intake, containment actions, and security hardening recommendations.
• Maintain thorough case documentation and contribute to reports.

Skills

Forensics

IR

Threat hunting

Scripting

Communication

Work under pressure

Self-starter

Cloud forensics

Education

CS/Forensics degree

Tools

X-Ways Forensics

Axiom

FTK

SentinelOne

SIEM

Job description

SentinelOne is looking for a DFIR Analyst to join the Digital Forensics and Incident Response team. You will perform hands-on forensic analysis, threat hunting, and rapid breach response for global enterprises across endpoints, networks, and cloud environments.

The role requires rigorous evidence-backed conclusions and clear documentation. This position involves on-call duties, collaborating with Technical Leads, and producing customer-facing reports.