Windows Detection Engineer - Remote

Overview

SentinelOne is defining the future of cybersecurity through our XDR platform that automatically prevents, detects, and responds to threats in real-time. Singularity XDR ingests data and leverages our patented AI models to deliver autonomous protection. With SentinelOne, organizations gain full transparency into everything happening across the network at machine speed – to defeat every attack, at every stage of the threat lifecycle.

We are a values-driven team where names are known, results are rewarded, and friendships are formed. Trust, accountability, relentlessness, ingenuity, and OneSentinel define the pillars of our collaborative and unified global culture. We're looking for people that will drive team success and collaboration across SentinelOne. If you’re enthusiastic about innovative approaches to problem-solving, we would love to speak with you about joining our team!

In Short

• Join the Windows Behavioral Rules Team at SentinelOne.
• Focus on Windows-based rule development for SIEM, EDR, XDR.
• Craft and own default rules for the Windows agent.
• Analyze false positives and enhance detection capabilities.
• Collaborate with the team to optimize existing rules.
• Stay informed about emerging threats and technologies.
• Follow good detection engineering practices.

Requirements

• 2+ years of experience in Detection Engineering / Red Teaming.
• Experience writing behavioral detection rules for EDR, XDR, SIEM.
• Deep understanding of modern Windows attack TTPs.
• Understanding of Windows internals.
• Hands-on experience with Python and C/C++ coding.
• Familiarity with CI/CD technologies like Jenkins.
• Strong analytical and problem-solving skills.
• Excellent communication and collaboration skills.

Benefits

• Flexible working hours and hybrid/remote work model.
• Flexible Time Off.
• Generous employee stock plan in the form of RSUs.
• Private medical insurance plan for you and your family.
• High-end MacBook or Windows laptop.
• Home-office-setup allowances.
• Internet allowances.
• Global Employee Assistance Program.