Low-Level Windows Identity Detection Engineer

Summary

Join SentinelOne, a cutting-edge cybersecurity company, and redefine the field with AI-powered innovation. As a Detection Engineer, you will be responsible for identifying and mitigating the newest identity threats. This role demands end-to-end ownership of behavior-based detection capabilities, from researching attack techniques to implementing solutions within our product. You will develop and utilize internal research tools, PoCs, and discover new ways to detect and prevent identity-based attacks. Your contributions will directly enhance the security of millions of Windows endpoints. We offer flexible working hours, a hybrid/remote work model, and a comprehensive benefits package.

Requirements

• 6+ years of experience in malware analysis (statically and dynamically)
• 6+ years of experience with C++
• Excellent understanding of the Windows Internals - understanding how core system components (Process and Threads, Virtual Memory and more) work behind the scenes
• Experienced with Identity-based attacks (Pass the Hash, Silver ticket, MFA bypass and more)
• Experienced with analysis tools, such as: IDA, WinDBG, SysInternals etc

Responsibilities

• Detect the newest identity threats
• Take end to end responsibility for behaviour based detection capabilities, starting from researching attack techniques, designing new methods to detect or prevent those, and implementing it in the product in the end
• Develop and use internal research tools, PoCs and discover new ways to detect/prevent identity-based attacks (Pass the Hash, Silver ticket, MFA bypass and more)
• Deliveries will enhance the security of dozens of millions of Windows endpoints which are protected by our platform

Preferred Qualifications

• Kernel development experience
• Advanced C++
• Understanding of existing AVs internals

Benefits

• Flexible working hours and hybrid/remote work model
• Flexible Time Off
• Flexible Paid Sick Days
• Global gender-neutral Parental Leave (16 weeks, beyond the leave provided by the local laws)
• Generous employee stock plan in the form of RSUs (restricted stock units)
• Attractive ESPP (employee stock purchase plan)
• Gym membership/sports gears by Cultfit
• Wellness Coach app, with 3,000+ on-demand sessions, daily interactive classes, audiobooks, and unlimited private coaching
• Private medical insurance plan for you and your family
• Life Insurance covered by S1 (for employees)
• Telemedical app consultation (Practo)
• Global Employee Assistance Program (confidential counseling related to both personal and work life matters)
• High-end MacBook or Windows laptop
• Home-office-setup allowances (one time) and maintenance allowance
• Internet allowances
• Provident Fund and Gratuity (as per govt clause)
• NPS contribution (Employee contribution)
• Half yearly bonus program depending on the individual and company performance
• Above standard referral bonus as per policy
• Udemy Business platform for Hard/Soft skills Training & Support for your further educational activities/trainings
• Sodexo food coupons