Senior Tools Engineer, Threat Intelligence

Summary

Join SentinelOne's SentinelLabs team as a Senior Threat Intelligence Engineer. This role requires a highly skilled, self-directed engineer proficient in programming and analytical problem-solving. You will collaborate with threat hunters and security researchers to develop and integrate tools, automate threat hunting processes, and enhance data curation. Your expertise in various technology stacks and rapid prototyping will be crucial. The position offers a competitive salary and a comprehensive benefits package.

Requirements

• Expertise working with threat intelligence platforms, particularly Vertex Synapse, with a strong understanding of how to leverage these platforms for data enrichment and threat intelligence automation
• A solid understanding of threat hunting processes and the ability to codify these processes into repeatable, scalable pipelines that enhance the efficacy of threat research efforts
• Strong analytical skills, capable of dissecting complex problems, synthesizing actionable information from diverse data sources, and finding opportunities for novel correlation
• Experience in software development, with strong proficiency in Python and/or Go, especially in developing and maintaining tools for security applications
• Comfort with rapidly prototyping and iterating on tools to ensure they meet the evolving needs of threat hunters and security researchers
• Knowledge of security telemetry data management, including the collection, analysis, storage, tagging, and enrichment of indicators of compromise and associated data sources such as VirusTotal Intelligence/Stairwell, and types like passive DNS, netflow, and scanning
• Excellent communication and collaboration skills, able to work effectively with cross-functional teams and surmise technical requirements from diverse stakeholders

Responsibilities

• Collaborate closely with threat hunters and security researchers to identify their needs, translating these into technical specifications for tool development
• Develop and integrate tools with Vertex Synapse, incorporating external enrichments, custom internal tools, and existing power ups to meet research requirements
• Rapidly prototype and refine tools to ensure they effectively support threat hunting processes and are seamlessly integrated into a repeatable pipeline
• Design and implement systems for telemetry enrichment and data curation to streamline the collection, analysis, storage, tagging, and enrichment of indicators of compromise and related data
• Codify threat hunting processes to maximize the value of diverse and unique data sources, meaningfully contributing to SentinelLabs threat research

Benefits

• Medical, Vision, Dental
• 401(k)
• Commuter
• Health and Dependent FSA
• Unlimited PTO
• Industry-leading gender-neutral parental leave
• Paid Company Holidays
• Paid Sick Time
• Employee stock purchase program
• Disability and life insurance
• Employee assistance program
• Gym membership reimbursement
• Cell phone reimbursement