Sr. Director, Global Threat Hunting

About Us:

SentinelOne is defining the future of cybersecurity through our XDR platform that automatically prevents, detects, and responds to threats in real-time. Singularity XDR ingests data and leverages our patented AI models to deliver autonomous protection. With SentinelOne, organizations gain full transparency into everything happening across the network at machine speed – to defeat every attack, at every stage of the threat lifecycle. 

We are a values-driven team where names are known, results are rewarded, and friendships are formed. Trust, accountability, relentlessness, ingenuity, and OneSentinel define the pillars of our collaborative and unified global culture. We're looking for people that will drive team success and collaboration across SentinelOne. If you’re enthusiastic about innovative approaches to problem-solving, we would love to speak with you about joining our team!

What are we looking for?

SentinelOne is seeking a threat hunting leader with proven experience developing programs, running concurrent intrusion events, and operating at company scale. This role is a critical component for SentinelOne’s ability to identify intrusion gaps, deploy emerging detections, work across teams in stressful environments, and continually improve our detection through response cycle. This leader will rapidly develop processes, test and field different technologies, and convert ad hoc efforts to established workflows. You will act as the cornerstone for the most important work done at SentinelOne–ensuring our clients are protected.

What will you do? 

• Lead a team of threat hunters in designing and implementing an intelligence-driven threat hunting effort while working with different teams, to include DFIR, MDR, Intelligence, and Detection Engineering.
• Regularly identify, research, and refine emerging intrusion techniques to develop specific hunting content and work with various teams to convert these efforts to product-grade detections.
• Provide technical leadership and experience to improve SentinelOne’s ability to identify, detect, and respond to intrusion activity in both single-victim and large-scale victim situations.
• Convert technical actions to executive-ready communications enabling rapid decisionmaking across SentinelOne.
• Work with engineering and tooling teams in a continual refinement and development cycle for internal capabilities.

What skills and knowledge should you bring?

• Prefer 15+ years of progressive professional experience (or equivalent combination of experience, certifications, and education), including multiple recent years of dedicated threat hunting organizational leadership in an enterprise or global environment.
• Demonstrated ability to lead multiple functions through an ongoing intrusion discovery event affecting multiple …