Staff Detection Engineer - Windows, Identity Security

Staff Detection Engineer - Windows, Identity Security

Staff Windows Identity Detection Engineer

Join to apply for the Staff Windows Identity Detection Engineer role at SentinelOne.

About us: At SentinelOne, we’re redefining cybersecurity by pushing the limits of what’s possible—leveraging AI-powered, data-driven innovation to stay ahead of tomorrow’s threats. From building industry-leading products to cultivating an exceptional company culture, our core values guide everything we do. We’re looking for passionate individuals who thrive in collaborative environments and are eager to drive impact.

We are looking for talented detection engineers who explore, hunt, and challenge security systems. You should be able to address tough security problems and deliver results quickly.

• You will be responsible for detecting the newest identity threats with end-to-end responsibility for behavior-based detection capabilities, from researching attack techniques to designing new methods and implementing them in the product.
• You will develop and use internal research tools and PoCs to discover new ways to detect or prevent identity-based attacks (e. g. , Pass the Hash, Silver Ticket, MFA bypass, and more).
• Your deliveries will enhance the security of millions of Windows endpoints protected by our platform.

• 3+ years of experience in malware analysis (static and dynamic)
• 3+ years of experience with C++
• Excellent understanding of Windows Internals (Processes, Threads, Virtual Memory, etc. )
• Experience with identity-based attacks (Pass the Hash, Silver Ticket, MFA bypass, and more) – advantage
• Experience with analysis tools such as IDA, WinDbg, Sysinternals, etc.
• Kernel development experience – advantage
• Advanced C++ – advantage
• Understanding of existing AV internals – advantage

Work on real-world problems with risks of millions of dollars, protecting against ransomware and other threats, and influence the architecture and building of our core platform. You will meet extraordinary challenges and work with the very best in the industry. We offer the following benefits:

• Flexible working hours; 100% remote role based in Spain with IWG access to major coworking chains
• Relocation assistance for candidates eligible to work in the EU (for those willing to relocate to the Czech Republic)
• Generous RSU stock plan with four-year vesting and 1-year cliff
• Yearly bonus, paid in two installments
• 30 days of paid annual leave
• Flexible paid sick days
• Pension insurance contribution
• Premium life and medical/dental insurance
• Meal, transport, and home office allowance totaling 440 EUR/month
• Global gender-neutral parental leave (16 weeks) and grandparent leave
• Volunteering paid day off and additional company holidays
• Global Employee Assistance Program
• Udemy Business access for hard/soft skills training
• Above-standard referral bonuses
• DEI&B programs and employee resource groups

Note: SentinelOne is an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, gender identity, age, disability status, or other protected characteristics. SentinelOne participates in the E-Verify Program for all U. S. based roles.