Senior Threat Intelligence Researcher - 5+ Yrs exp (Bangalore / Remote India)

Posted 8 Days Ago
Be an Early Applicant
Hiring Remotely in Bengaluru, Karnataka
Remote
Senior level
Information Technology • Security • Cybersecurity
The Role
The Senior Threat Intelligence Researcher will lead investigations into emerging cyber threats, conducting in-depth research, analyzing malware, and creating actionable intelligence reports. The role involves developing hunting strategies and tracking threat actors while staying updated on malware trends and attack techniques. The researcher will also monitor malicious infrastructures and collaborate with detection teams to address gaps related to evolving threats.
Summary Generated by Built In

About Us:

SentinelOne is defining the future of cybersecurity through our XDR platform that automatically prevents, detects, and responds to threats in real-time. Singularity XDR ingests data and leverages our patented AI models to deliver autonomous protection. With SentinelOne, organizations gain full transparency into everything happening across the network at machine speed – to defeat every attack, at every stage of the threat lifecycle. 

We are a values-driven team where names are known, results are rewarded, and friendships are formed. Trust, accountability, relentlessness, ingenuity, and OneSentinel define the pillars of our collaborative and unified global culture. We're looking for people that will drive team success and collaboration across SentinelOne. If you’re enthusiastic about innovative approaches to problem-solving, we would love to speak with you about joining our team!

What are we looking for?

  • An adept cybersecurity researcher capable of leading deep-dive investigations into both new and known cyber threats
  • An individual who can synthesize complex data into actionable intelligence reports and briefings to clearly communicate potential risks to senior management and stakeholders.
  • A strategic thinker with the ability to develop and refine cyber hunting strategies to adapt to and anticipate shifts in threat actor tactics and techniques.
  • A vigilant analyst who stays abreast of the latest in malware developments, attack methods, and defensive evasion tactics, ensuring our defenses are always a step ahead.
  • A detail-oriented investigator focused on monitoring and understanding the infrastructure of adversaries to effectively track and counteract their operations.

What will you do? 

Lead and conduct in-depth research and analysis of emerging and existing cyber threats, including ransomware campaigns, and other sophisticated attacks. - Utilize reverse engineering and malware analysis skills to identify and analyze malicious code and artifacts. Create actionable intelligence reports and threat briefings to inform senior management and key stakeholders of the potential risks associated with ransomware groups. keep curating a KB on ransomware operations, their tradecraft, affiliations. Identify and track threat actors, their capabilities, and the infrastructure they use. Analyze malware samples and artifacts to identify their functionality, capabilities, and potential impact.Stay current with emerging malware trends, attack techniques, and evasion tacticscreating and maintaining hunting strategies to keep track of operations and shifting in tactics creating and maintaining hunting strategies to keep track of operations and shifting in tacticsMonitoring malicious infrastructures and extract fingerprints to track C2s

  • Work closely with detection in order to understand, track gaps in detection with respect to the latest evolutions of threats.
  • Build and put in place tools to spot trends and anomalies in our telemetry.

What skills and knowledge should you bring?

  • [must to have] Strong knowledge of malware analysis tools and techniques, including static and dynamic analysis, sandboxing, and debugging. + Knowledge of unpacking and deobfuscation.
  • [must to have] Understanding software vulnerabilities, and ability to implement hunting strategies to track and discover them
  • [must to have] Knowledge of various threat intelligence frameworks such as the Diamond Model, MITRE ATT&CK.
  • [must to have] Knowledge of the cyber threat landscape, including actors and TTPs
  • [must to have] Strong analytical skills, with the ability to identify patterns and trends in large datasets - [must to have] strong knowledge of Yara to track new malware families and knowledge on validation best practices
  • [must to have] rudimentary knowledge about working of EDR in Linux environment
  • [must to have] programming skills in python
  • [nice to have] Relevant certifications, such as Certified Malware Analyst (CMA), Certified Reverse Engineering Analyst (CREA), or GIAC Certified Malware Reverse Engineer (GREM)

Why Us?

You will be joining a cutting-edge company, where you will tackle extraordinary challenges and work with the very best in the industry

  • Employee stock purchase program and RSU 
  • Numerous company-sponsored events including regular happy hours and team-building events
  • Flexible Time Off.
  • Flexible Paid Sick Days.
  • Global gender-neutral Parental Leave (16 weeks, beyond the leave provided by the local laws) 
  • Gym membership/sports gears by Cultfit.
  • Wellness Coach app, with 3,000+ on-demand sessions, daily interactive classes, audiobooks, and unlimited private coaching. 
  • Private medical insurance plan for you and your family.
  • Life Insurance covered by S1 (for employees)
  • Telemedical app consultation (Practo)
  • Global Employee Assistance Program (confidential counseling related to both personal and work life matters)
  • High-end MacBook or Windows laptop.
  • Home-office-setup allowances (one time) and maintenance allowance. 
  • Internet allowances.
  • Provident Fund and Gratuity (as per govt clause)
  • NPS contribution (Employee contribution)
  • Half yearly bonus program depending on the individual and company performance.
  • Above standard referral bonus as per policy.
  • LinkedIn Business platform for Hard/Soft skills Training & Support for your further educational activities/trainings
  • Sodexo food coupons.

SentinelOne is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

SentinelOne participates in the E-Verify Program for all U.S. based roles. 

Top Skills

Python
The Company
HQ: Mountain View, CA
2,830 Employees
On-site Workplace
Year Founded: 2013

What We Do

SentinelOne is a leading provider of autonomous security solutions for endpoint, cloud, and identity environments. Founded in 2013 by a team of cybersecurity and defense experts, SentinelOne revolutionized endpoint protection with a new, AI-powered approach. Our platform unifies prevention, detection, response, remediation, and forensics in a single, easy-to-use solution.
Our endpoint security product is designed to protect your organization's endpoints from known and unknown threats, including malware, ransomware, and APTs. It uses artificial intelligence to continuously learn and adapt to new threats, providing real-time protection and automated response capabilities.

SentinelOne's approach to security is designed to help organizations secure their assets with speed and simplicity. We provide the ability to detect malicious behavior across multiple vectors, rapidly eliminate threats with fully-automated integrated response, and adapt their defenses against the most advanced cyberattacks.

We are recognized by Gartner in the Endpoint Protection Magic Quadrant as a Leader and have enterprise customers worldwide. Our customers include some of the world's largest companies in various industries such as finance, healthcare, government, and more.

At SentinelOne, we understand that cybersecurity is a constantly evolving field and that the threats facing organizations are becoming increasingly sophisticated. That's why we are committed to staying at the forefront of technology and innovation and providing our customers with the best protection against cyber threats.

We offer our customers a wide range of services, including threat hunting, incident response, and incident management. Our team of experts is available to assist you 24/7 and can help you respond to and manage cyber incidents quickly and effectively.

To learn more about our products and services, please visit our website at www.sentinelone.com or contact us to schedule a demo

Gallery

Gallery

Similar Jobs

MetLife Logo MetLife

Senior Group Insurance Administrator

Fintech • Information Technology • Insurance • Financial Services • Big Data Analytics
Remote
India
43000 Employees

Roblox Logo Roblox

Sr. IT Auditor

Computer Vision • Gaming • Software • Virtual Reality • Web3 • Metaverse
Remote
India
2500 Employees

CrowdStrike Logo CrowdStrike

Engineer II - Product QA (Remote, IND)

Cloud • Information Technology • Sales • Security • Cybersecurity
Remote
16 Locations
10000 Employees

Atlassian Logo Atlassian

Principal Talent Intelligence Consultant

Cloud • Information Technology • Productivity • Security • Software • App development • Automation
Remote
Bengaluru, Karnataka, IND
11000 Employees

Similar Companies Hiring

Jobba Trade Technologies, Inc. Thumbnail
Software • Professional Services • Productivity • Information Technology • Enterprise Web • Consulting • Cloud
Chicago, IL
45 Employees
InCommodities Thumbnail
Renewable Energy • Machine Learning • Information Technology • Energy • Automation • Analytics
Austin, TX
234 Employees
HERE Thumbnail
Software • Logistics • Internet of Things • Information Technology • Computer Vision • Automotive • Artificial Intelligence
Amsterdam, NL
6000 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account