Senior Threat Hunter

SentinelOne; United States; On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Medical cover

Assistance program

Gym reimbursement

RSU program

Flexible spending

Life Insurance

Disability Insurance

401K

Team events

Volunteer time

Job summary

SentinelOne is seeking a Senior Threat Hunter to lead proactive threat hunting across client environments. You will leverage the SentinelOne platform to uncover stealthy malware, suspicious behavior, and gaps in security hygiene, guiding immediate containment and long-term improvements.

You'll work with telemetry from millions of endpoints, distilling actionable intelligence, and presenting findings to executive and technical stakeholders.

Qualifications

• 5+ years in digital forensics, threat hunting, incident response, red team, or breach attack simulations.
• Experience with Cyber Threat Intelligence tools.
• Knowledge of the MITRE ATT&CK framework.
• Experience with EDR/XDR telemetry analysis.
• Proficient in Python and Git.

Responsibilities

• Conduct deep proactive threat hunting for SentinelOne clients.
• Research and develop new detection rules, techniques and tooling.
• Support Wayfinder Compromise Assessment services and present findings to stakeholders.
• Advise clients on containment, remediation, and security posture improvements.
• Collaborate with clients to implement recommendations and refine detection coverage.

Tools

OSINT tools

Python

Git

IDA Pro

Binary Ninja

Ghidra

MITRE ATT&CK

EDR

XDR

Threat intel tools

DFIR tools

Job description

• Step into a high-impact role at SentinelOne’s premier Professional Services division, where you’ll be at the forefront of proactive threat detection and response. As a Senior Threat Hunter, you won’t just react to threats—you’ll hunt them down before they can cause harm. Leveraging the power of SentinelOne’s cutting-edge platform, you’ll uncover stealthy malware, suspicious behaviors, insider threats, and gaps in security hygiene hiding within client environments
• Your mission: detect and disrupt threats before damage occurs, advise on immediate containment, and guide clients toward lasting improvements in their security posture. You’ll work with telemetry from millions of endpoints worldwide, distilling actionable intelligence and identifying attack patterns that shape tomorrow’s defense strategies
• Support Wayfinder Compromise Assessment services, scope work, deliver technical findings and present results to executive and technical stakeholders
• Conduct deep proactive threat hunting for SentinelOne clients
• Research and develop new detection rules, techniques and tooling to improve the service
• Work closely with clients to remediate threats and improve their security posture

Benefits

• Medical, dental, and vision coverage
• Employee assistance program
• Gym reimbursement
• Incentive-based challenges
• Mental health and mindfulness
• Unlimited Time Off
• Grandparent Leave
• Volunteer Time Off
• Paid Sick Time
• Paid Holidays
• 16 weeks Gender-Neutral Parental Leave
• Restricted Stock Unit Program
• Flexible Spending Accounts
• Life Insurance
• Short and Long Term Disability Insurance
• 401K
• Team building activities
• Celebrations and social gatherings
• Community volunteering events
• Global all hands and local town hall events

Practical knowledge of OSINT tools and techniquesAdversarial mindset — offensive security experience; OSCP, OSEP, CRTO are a plus5+ years experience delivering digital forensics, threat hunting, incident response, red team, penetration testing, or breach attack simulation servicesExperience working with Cyber Threat Intelligence toolsFamiliarity with XDR logs (cloud, identity, etc.)Familiarity with EDR and system internals (Windows, Linux, macOS)Experience with EDR/XDR telemetry analysisKnowledge of the MITRE ATT&CK framework5+ years of experience in client-facing cybersecurity operations rolesExperience with Python programmingWorking knowledge of GitA commitment to staying current with the evolving cybersecurity landscapeFamiliarity or experience with DFIR tools and techniquesReverse engineering of compiled code (IDA Рro, Binary Ninja, Ghidra)Demonstrated track record of security research