Offensive Security Researcher

SentinelOne, Bengaluru, Karnataka, India +1

The role

At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them becomes more critical than ever. When you join SentinelOne, your work helps protect global enterprises, critical infrastructure, and the technologies shaping tomorrow. If you are motivated by meaningful challenges and want your impact to be real, measurable, and global, you will find purpose here.

What you need

2 to 4 years of hands-on experience in offensive security, security research, or detection engineering.
Hands-on depth in at least two of the following areas, and a willingness to learn the rest: exposure and exploitation (taking a known CVE or misconfiguration and building a reliable, safe PoC or verification check); cloud (IAM abuse and privilege escalation in AWS, Azure, or GCP, and/or Kubernetes and container security); identity (Active Directory attacks such as Kerberos abuse, ADCS, ACL abuse, and NTLM relay, and Entra ID attacks such as token abuse, consent and app-registration abuse, and hybrid sync paths); and AI security (OWASP Top 10 for LLM Applications, and how agents using tool calling and MCP can be abused).
Detection engineering skills: the ability to turn an attack into detection logic, knowing which logs show it (for example CloudTrail, Azure Activity and Entra sign-in and audit logs, GCP Audit Logs, Kubernetes audit logs, and domain controller events) and writing a rule that catches it without excessive noise.
Strong Python scripting skills for PoCs, lab automation, and data analysis.
Responsible research habits, including safe lab practice and coordinated disclosure.
Public work such as CVEs, blog posts, detection rules, CTF results, bug bounty findings, or talks is preferred.
Experience with a query language such as KQL, SPL, or SQL is preferred.
Experience building or using AI and LLM-assisted workflows for security research or detection engineering is preferred.
Familiarity with Shodan, Censys, ExploitDB, BloodHound, Pacu, and Stratus Red Team for exposure research is preferred.
Certifications such as OSCP, CRTP, or similar cloud and AI certifications are preferred, though they are one signal among several and not a requirement.

Why SentinelOne?

AI is redefining how the world operates and rewriting the rules of security in real time, and SentinelOne was built for this moment. From day one, we architected an AI-native platform designed to operate at machine speed, not as an add-on to legacy systems but as the foundation itself. If you want to build where innovation and impact move together, this is that place.

We invest in our Sentinels with comprehensive, competitive benefits designed to support you and your family:

Offensive Security Researcher

The role

Offensive Security Researcher

The role

What you will do

What you need

Equity & Rewards

Time Off & Wellbeing

Insurance & Financial Security

Work Perks & Flexibility

Wellness & Lifestyle

About SentinelOne

Similar jobs at other companies

Principal Offensive Security Engineer

AI Security Researcher

Senior Commercial Solutions Engineer

Senior Security Research Engineer

Senior Security Research Engineer

Senior Security Research Engineer

Interview questions

SentinelOne