Staff Threat Intelligence Engineer

Summary

Join SentinelOne's SentinelLabs team as a Staff Threat Intelligence Engineer! This 100% remote role (Italy-based, EU work eligibility required) involves collaborating with threat hunters and researchers to develop and integrate threat intelligence tools using Python and Golang. You will prototype and refine tools for threat hunting, telemetry enrichment, and data curation. Leverage your expertise in threat intelligence platforms and security telemetry data management to codify threat hunting processes. SentinelOne offers flexible working hours, generous stock plans, bonuses, comprehensive benefits (medical, life insurance, etc.), flexible time off, parental leave, professional development opportunities, and more.

Requirements

• Expertise working with threat intelligence platforms, with a strong understanding of how to leverage these platforms for data enrichment and threat intelligence automation
• A solid understanding of threat hunting processes and the ability to codify these processes into repeatable, scalable pipelines that enhance the efficacy of threat research efforts
• Strong analytical skills, capable of dissecting complex problems, synthesizing actionable information from diverse data sources, and finding opportunities for novel correlation
• Experience in software development, with strong proficiency in Python and/or Go, especially in developing and maintaining tools for security applications
• Comfort with rapidly prototyping and iterating on tools to ensure they meet the evolving needs of threat hunters and security researchers
• Knowledge of security telemetry data management, including the collection, analysis, storage, tagging, and enrichment of indicators of compromise and associated data sources such as VirusTotal Intelligence/Stairwell, and types like passive DNS, netflow, and scanning
• Excellent communication and collaboration skills, able to work effectively with cross-functional teams and surmise technical requirements from diverse stakeholders

Responsibilities

• Collaborate closely with threat hunters and security researchers to identify their needs, translating these into technical specifications for tool development
• Develop (using Python and Golang) and integrate tools, incorporating external enrichments, custom internal tools, and existing power ups to meet research requirements
• Rapidly prototype and refine tools to ensure they effectively support threat hunting processes and are seamlessly integrated into a repeatable pipeline
• Design and implement systems for telemetry enrichment and data curation to streamline the collection, analysis, storage, tagging, and enrichment of indicators of compromise and related data
• Codify threat hunting processes to maximize the value of diverse and unique data sources, meaningfully contributing to SentinelLabs threat research

Preferred Qualifications

Willingness to relocate to the Czech Republic (relocation assistance available for EU-eligible candidates)

Benefits

• Flexible working hours, this is a 100% remote role based within Italy
• Optional membership in major coworking chains
• Generous employee stock plan in the form of RSUs (restricted stock units) grant not options; 4 years vesting with 1 year cliff and then quarterly, stock refresh yearly
• Yearly bonus depending on the performance of the company, paid out in 2 installments
• Quadro benefits - Private Medical, Life Insurance, Accident Insurance, Study funds and Healthcare benefits
• Flexible time off (up to 30 paid days off per annum!)
• Global gender-neutral Parental Leave (16 weeks, beyond the leave provided by the local laws) & Grandparent Leave
• Volunteering paid day off & Additional paid Company holidays off (e.g. 4 days in 2022)
• Global Employee Assistance Program (confidential counseling related to both personal and work life matters)
• Udemy Business platform for Hard/Soft skills Training, internal mentoring 'MentorOne' & Support for your further educational activities/trainings
• Above-standard referral bonus
• DEI&B programs that promote employee resource groups like SentinelWIN (Women Inclusion Network), Blk@S1, Latinos@S1, Pan-Asian@S1, Out@S1 (LGBTQIA+) and Sentinels Who Served
• & Aditional country-specific benefits to Italy