Senior Threat researcher
SentinelOneTel Aviv-Yafo и ещё 2 городаот 5 лет
PythonC++CybersecurityPowerShellIncident ResponseThreat IntelligenceReverse EngineeringThreat HuntingMalware AnalysisThreat Research
Описание
As a Senior Threat Researcher, you will be tasked with taking apart emerging and known cyber threats - leading in-depth investigations into threat actors, their capabilities, tools and operations, spanning across Endpoint and Cloud domains. This role combines hands-on technical analysis with strategic intelligence production, enabling our ThreatOps teams to protect our customers from adversaries across the ever evolving threat landscape.
Responsibilities
- Conduct deep-dive technical analysis of malware samples, attacker infrastructure and protocols
- Track adversary progression, develop and maintain technical reports on threat actor profiles, malware families, and campaign timelines - curate and expand our internal Knowledge Base and IOCs collections
- Collaborate with threat intelligence, detection engineering, threat hunting and incident response teams in investigating intrusions and to translate research into actionable detections and defenses
- Work with our lab teams to improve our internal infrastructure and tooling
- Present findings to technical teams, leadership, and occasionally external partners or customers
Requirements
- 5+ years of experience in malware analysis, threat intelligence, threat hunting or incident response
- Deep understanding of the cybersecurity landscape, attack vectors and TTPs, especially on Windows
- Experience in reverse engineering (x86/x64, ARM\ARM64) and malware analysis (statically and dynamically)
- Proficiency in C/C++ and scripting languages (Python, Powershell)
- Experience with creating signatures (YARA, Snort, Sigma) to identify and track malware families
- Technical writing & content development skills
Nice to have
- Proven track record of publication or speaking at security conferences
- Experience leveraging agentic AI workflows for malware analysis and detection engineering tasks (reverse engineering, code auditing, signature writing)
- Knowledge about internal working of EDR products
We offer
- Restricted Stock Units (RSUs)
- Employee Stock Purchase Plan (ESPP)
- Competitive leave benefits
- Gender-neutral parental leave
- Employee Assistant Program
- Workout sessions and a Wellness App
- Medical and insurance benefits
- Pension
- Employee Assistance Program (EAP)
- Global home office allowance
- Mobile phone reimbursement
- Study Fund