Senior Threat Intelligence Researcher

About the role

SentinelOne is seeking a Senior Threat Intelligence Researcher to lead deep‑dive investigations of emerging and known threats. You will turn complex data from internal hunts, dark‑web sources and research repositories into clear, actionable briefings for senior leadership, while shaping proactive hunting strategies.

Key responsibilities

• Synthesize data from internal telemetry, dark‑web forums, leak sites and research repositories into threat briefings and risk assessments for security leadership.
• Lead hypothesis‑driven threat hunts across networks, cloud environments and endpoints to uncover sophisticated intrusions.
• Map threat‑actor footprints by pivoting through EDR telemetry and external infrastructure such as domain registrations, SSL certificates and passive DNS.
• Analyze adversary TTPs, track shifts in execution, persistence and lateral movement, and provide actionable recommendations.

Required profile

• Proven experience in threat research, threat intelligence or threat hunting.
• Strong analytical abilities to identify patterns and trends in large data sets.
• Deep knowledge of the cyber‑threat landscape, including threat actors and their TTPs.
• Familiarity with SentinelOne products and ability to maximize telemetry usage.

Required skills

• YARA rule development and validation.
• Knowledge of MITRE ATT&CK, CISA KEV, EPSS, AMITT and MISP Galaxy.
• Malware analysis techniques: static and dynamic analysis, sandboxing, debugging.
• Understanding of software vulnerabilities and exploitation tracking.
• Technical writing and content development for intelligence reports.

What we offer

• Salary starting from 3000 EUR per month, with performance‑based bonus and equity (RSUs, ESPP).
• Flexible hybrid work model in Prague, Brno or remote within CZ/SK.
• Comprehensive benefits including health, disability, pension, parental leave and wellness programs.
• Opportunities to work on AI‑native security platform at the forefront of the industry.