Senior Threat Intelligence Researcher — Global Threat Hunting & Analysis

SentinelOne; Polska; Remote; PLN 180,000 - 300,000; Full time

Benefits offered by this job

RSUs

Employee Stock Purchase Plan (ESPP)

Competitive leave benefits

Gender-neutral parental leave

Medical and insurance benefits

Pension

Global home office allowance

Wellbeing allowance

MultiSport

Job summary

SentinelOne is seeking a Senior Threat Intelligence Researcher to lead deep-dive investigations into emerging and known threats. You will synthesize complex data into actionable intelligence and provide clear briefings to senior management.

You will also develop refined hunting strategies to adapt to shifts in threat actor tradecraft. You will investigate intrusions, analyze TTPs, and track adversary infrastructure, ensuring defenses stay ahead of evolving threats.

Qualifications

• Minimum experience in threat intelligence or threat hunting.
• Deep knowledge of the cyber threat landscape, including TTPs.
• Strong data analytics to identify patterns in large datasets.

Responsibilities

• Synthesize data from hunts and open sources into actionable threat briefings.
• Lead in-depth threat hunts across networks, cloud, and endpoints.
• Map threat actor footprints using EDR telemetry.
• Analyze adversary TTPs and identify shifts in execution, persistence, and movement.
• Trace external infrastructure through domains, SSL, and DNS.

Skills

Threat intelligence

Threat hunting

Analytical skills

Telemetry

YARA

Vulnerability knowledge

MITRE ATT&CK

CISA KEV

EPSS

AMITT

MISP Galaxy

Malware analysis

Technical writing

EDR basics

CMA

CREA

GREM

Tools

Static analysis tools

Dynamic analysis tools

Sandboxing tools

Debugger

Job description

SentinelOne is seeking a Senior Threat Intelligence Researcher to lead deep-dive investigations into emerging and known threats. You will synthesize complex data into actionable intelligence and provide clear briefings to senior management.

You will also develop refined hunting strategies to adapt to shifts in threat actor tradecraft. You will investigate intrusions, analyze TTPs, and track adversary infrastructure, ensuring defenses stay ahead of evolving threats.