What are we looking for?

Join Setinel One's elite professional services division by becoming part of our proactive threat hunting program. Our Threat Hunters serve our clients by utilizing the Sentinel One platform to identify potential malware, malicious behavior, insider threats, and security hygiene issues that exist within client environments.
The Hunters' goal is to identify threats, disrupt attacks prior to further damage occurring within a client environment, and advise for remediation as well as long-term security posture improvement. Incumbent will be responsible for identifying attack trends and threat intelligence by harvesting threat data generated by several million endpoints from across the globe.
This is an exciting opportunity to join a growing team of industry renowned experts dedicated to providing the highest level of security service to our clients.

What will you do?

• Conduct proactive threat hunting services for Sentinel One clients
• Build, evolve, and expand hunting tooling, techniques and use-cases
• Integrate relevant threat intelligence and dark web data into hunting operations
• Advise engineering team on platform enhancements to further enable rapid and effective threat hunting
• Work closely with clients to remediate threats and improve long-term security posture

What experience or knowledge should you bring?

• At least 5 years experience in cyber security relevant roles like security engineering, SOC operations, system administration, digital forensic investigations, penetration testing, red teaming, threat intelligence, network threat hunting, or malware analysis
• Experience in threat hunting via endpoint focused threat hunting
• Strong knowledge in Python scripting, including:
• • API integration
  • DB integration
  • data manipulation
  • Multiprocessing
• Working knowledge of git
• Working knowledge on utilising CTI tools for data enrichment
• Working experience with GCP and Amazon Cloud solutions
• Experience with working under Scrum regime
• Ability to create code with the best Python practices
• Ability to work with large datasets to get valuable and vital information
• Strong understanding of common malware activity on endpoints
• Knowledge of MITRE ATT&CK framework and known APT group activity
• Operating system internals knowledge (Windows, Linux, OSX)
• Experience utilizing EDR technologies
• Experience with working with Cyber threat Intelligence tools and data
• Knowledge of OSINT tools and techniques

Why us?

• Generous RSUs (Restricted Stock Units) and ESPP (Employee Stock Purchase Programme) available
• Annual bonus based on your performance, paid out in 2 instalments
• Flexible time off on top of the standard 5 weeks of vacation
• Flexible paid sick days and fully paid short term sick and short term nursing leave
• Global gender-neutral parental leave (16 weeks, beyond the leave provided by the local laws) and grandparent leave
• Volunteering paid day off and additional paid company-wide days off (e.g. 4 days in 2022)
• Premium life insurance, private medical care and pension insurance contribution
• Meal & Wellbeing Allowances
• Global Employee Assistance Program, including confidential counselling related to both personal and work life matters
• High-end Mac Book, or Windows laptop, home-office-setup gear and a work-from-home allowance
• Full access to Linked In Learning, an e-learning platform
• Refreshments and snacks at the offices
• Optional company events for those who like to meet outside of work (sports days, BBQs, charity events, etc.)
• Above-standard referral bonus