Senior Windows Detection Engineer

About the role

Senior Windows Detection Engineer at SentinelOne. Research attacker tradecraft including intrusion sets, malware families, red team tooling, and emerging Windows TTPs, and translate findings into precise.

What you'll do

• Research attacker tradecraft including intrusion sets, malware families, red team tooling, and emerging Windows TTPs, and translate findings into precise
• Design multi-event correlation logic that catches technique-level behavior rather than brittle indicators, with attention to evasion and bypass resistance
• Own the full rule lifecycle: hypothesis, authoring, validation, false-positive analysis, promotion to default, and ongoing tuning in production
• Analyze telemetry and alert data at scale to measure rule noise and efficacy, and drive improvements to precision and coverage
• Define and prioritize the detection backlog based on threat intelligence, customer impact, and coverage gaps across the ATT&CK matrix

What you need

• Windows
• SIEM
• EDR
• Python
• Test cases
• Any graduate

Good to have

• C++
• CI/CD
• C
• Jenkins