Windows Detection Engineer at SentinelOne – Poland

About us:

SentinelOne is defining the future of cybersecurity through our XDR platform that automatically prevents, detects, and responds to threats in real time. Singularity XDR processes data and leverages our patented AI models to deliver autonomous protection. With SentinelOne, organizations gain complete visibility into everything happening on the network at machine speed – defeating every attack, at every stage of the threat lifecycle.

We are a values-driven team where names are known, results are rewarded, and friendships are formed. Trust, accountability, relentlessness, ingenuity, and OneSentinel define the pillars of our collaborative and united global culture. We are looking for people who will drive team success and collaboration across SentinelOne. If you are passionate about innovative approaches to problem solving, we would love to talk to you about joining our team!

What are we looking for?

• We are looking for talented detection engineers, people who look at the world differently, who discover, ‘hunt’, live to beat and challenge the system.
• People who can tackle difficult security issues quickly.

What are you going to do?

• You will be responsible for detecting the latest malware and exploits based on SentinelOne’s Endpoint Platform. The role includes end-to-end responsibility for behavior-based detection capabilities, starting from reversing the samples, designing new methods to detect or prevent them, and finally implementing them in the product.
• You will develop and use internal investigation tools, PoCs, and discover new ways to detect/prevent exploit attacks (EoP, drive-by attacks, and more). Ultimately, your deliveries will improve the security of tens of millions of Windows endpoints protected by our platform.
• You are also encouraged to write white papers, blogs and articles (but only if you wish).

What experience or knowledge should you bring?

• Demonstrable experience in reverse engineering x86/x64 binaries.
• 4+ years of experience in malware analysis (static and dynamic)
• 4+ years of experience with C, C++
• Excellent knowledge of the internal workings of Windows
• Experience with analysis tools such as: IDA, WinDBG, SysInternals etc.
• Experience with kernel development – advantage
• Knowledge of the internal workings of existing AVs: an advantage.

What we offer you

• Flexible working hours, this is an external position in Poland; we offer IWG passes for large coworking chains
  • Optionally, for candidates willing to relocate to the Czech Republic, relocation assistance is available for candidates already eligible to work in the EU.
• Generous employee stock plan in the form of RSUs (restricted stock units), no options; 4-year vesting with 1-year cliff and quarterly thereafter, annual share renewal
• Annual bonus depending on company performance, paid in 2 installments
• Global gender-neutral parental leave (16 weeks, in addition to the leave provided by local law) and grandparent leave
• Paid day off for volunteer work and additional paid company holidays (e.g. 4 days in 2022)
• Global Employee Assistance Program (confidential counseling regarding both personal and work-related matters)
• Udemy Business platform for hard/soft skills training and support for your further educational activities/trainings
• Referral bonus above the norm

& Additional country-specific benefits for Poland

SentinelOne is proud to be an equal opportunity and affirmative action employer. We do not discriminate on the basis of race, religion, color, national origin, sex (including pregnancy, childbirth or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability or other applicable legally protected characteristics.

SentinelOne participates in the E-Verify program for all functions in the US.