[Remote] Staff DFIR Analyst

šŸŒ Remote, USA šŸŽÆ Full-time šŸ• Posted Recently

Job Description

Note: The job is a remote job and is open to candidates in USA. SentinelOne is redefining cybersecurity by leveraging AI-powered, data-driven innovation to combat future threats. The role involves conducting digital forensic investigations and threat hunting operations for global clients, ensuring excellence in engagements, and managing breach response investigations.

    Responsibilities
  • Accountable to ensure excellence in every engagement, to include scoping, forensic analysis, reporting, hunting, remediation consulting, and client communication
  • Contribute as a lead investigator for engagements
  • Manage all aspects of a breach response and containment investigation
  • Technical investigative skills must include host-based forensic analysis, EDR-driven incident response, malware analysis, memory analytics, and network log investigations
  • Provide detailed and impactful formal investigative reports, to include technical findings and security improvement recommendations
  • Work closely with the threat intelligence team to pursue attribution, identify attack trends, innovative malicious TTPs, and contribute to community-facing publications and blogs
    Skills
  • 4+ years of hands-on consulting experience in threat hunting, digital forensics, and incident response
  • Technical investigative skills must include host-based forensic analysis, EDR-driven incident response, malware analysis, memory analytics, and network log investigations
  • Provide detailed and impactful formal investigative reports, to include technical findings and security improvement recommendations
  • Work closely with the threat intelligence team to pursue attribution, identify attack trends, innovative malicious TTPs, and contribute to community-facing publications and blogs
  • Experience or knowledge of conducting endpoint based threat hunting (compromise assessments)
  • Experience working with cyber threat intelligence platforms and the threat intelligence process from raw attack data to finished intel and publications
  • Expert level experience with forensic investigative software (X-Ways or Axiom Cyber preferred)
  • Experience with EDR/XDR platforms (SentinelOne preferred)
  • Experienced conducting dynamic malware analysis and understanding of the reverse engineering process (preferred)
  • Experience with memory analytics (Volatility Preferred)
    Benefits
  • Medical, Vision, Dental, 401(k), Commuter, Health and Dependent FSA
  • Unlimited PTO
  • Industry leading gender-neutral parental leave
  • Paid Company Holidays
  • Paid Sick Time
  • Employee stock purchase program
  • Disability and life insurance
  • Employee assistance program
  • Gym membership reimbursement
  • Cell phone reimbursement
  • Numerous company-sponsored events including regular happy hours and team building events
    Company Overview
  • SentinelOne is an autonomous cybersecurity solution company. It was founded in 2013, and is headquartered in Mountain View, California, USA, with a workforce of 1001-5000 employees. Its website is http://www.sentinelone.com.
    Company H1B Sponsorship
  • SentinelOne has a track record of offering H1B sponsorships, with 13 in 2025, 14 in 2024, 2 in 2023, 18 in 2022, 5 in 2021. Please note that this does not guarantee sponsorship for this specific role.

Apply Now

Apply Now

Ready to Apply?

Don't miss out on this amazing opportunity!

šŸš€ Apply Now

Similar Jobs

Recent Jobs

You May Also Like