Windows Detection Engineering Manager
SentinelOneTel Aviv-Yafo и ещё 2 города
Machine LearningC++WindowsCybersecurityEndpoint SecurityDetection EngineeringLuaBehavioral AnalysisExploitsMalware
Описание
At SentinelOne, you will be tasked with helping shape the future of endpoint security through a unified, converged platform that automatically prevents, detects, and responds to threats in real time. You will lead a team of engineers that create advanced Windows behavioral detections and in memory traps by combining deep understanding of the OS system, behavioral analysis, and innovative machine learning techniques to identify and stop sophisticated attacks before they cause harm.
Responsibilities
- Manage a team of detection engineers and guide them through the research and development of detection rules and infrastructure
- Drive the detection of the newest malware and exploits based on SentinelOne’s Endpoint Protection platform
- Have end-to-end responsibility for behavior-based detection capabilities, starting from leading any prior research, designing new methods to detect or prevent those, and the implementation of it in the product in the end (SW development in C++23 and scripting in Lua)
- Lead the development and research of attack tools, PoCs, and the discovery of new ways to detect/prevent exploitation attacks (EoP, drive-by attacks, and more)
- Enhance the security of dozens of millions of Windows endpoints, which are protected by our platform
- Meet extraordinary challenges facing the newest attacks and tech obstacles, and overcome them
- Work with the very BEST in the industry in a flexible and independent environment
- Influence the design of a disruptive product that will shape the security industry of tomorrow
Requirements
- Proven experience in leading a team of researchers or detection engineers (highly preferred)
- Experience in writing behavioral detection rules - understanding how to detect low-level malicious techniques while evaluating the rule’s efficacy
- Excellent understanding of the Windows Internals - understanding how core system components (Process and Threads, Virtual Memory, and more) work behind the scenes
Nice to have
- Modern C++ experience and understanding of existing AV / EDR internals
We offer
- Restricted Stock Units (RSUs)
- Employee Stock Purchase Plan (ESPP)
- Competitive leave benefits
- Gender-neutral parental leave
- Employee Assistant Program
- Workout sessions and a Wellness App
- Medical and insurance benefits
- Pension
- Employee Assistance Program (EAP)
- Global home office allowance
- Mobile phone reimbursement
- Study Fund
Hiring process
- Apply here now!