Offensive Security Researcher

Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them becomes more critical than ever. When you join SentinelOne, your work helps protect global enterprises, critical infrastructure, and the technologies shaping tomorrow. If you are motivated by meaningful challenges and want your impact to be real, measurable, and global, you will find purpose here. About Us SentinelOne is a company at the intersection of AI and security, pioneering a new operating model for cybersecurity. Our AI-native platform unifies protection across endpoint, cloud, identity, data, and AI systems to deliver autonomous detection and response with clarity and speed. By combining real-time analytics, intelligent automation, and a unified data foundation, we reduce noise, simplify complexity, and empower security teams to focus on what truly matters. Our teams are builders, problem-solvers, and innovators committed to shaping the future of security. If you are excited to solve hard problems alongside talented, mission-driven people, we invite you to help us build a safer future for humanity. What Are We Looking For? We’re looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes. As an Offensive Security Researcher, you will be tasked with studying how attackers break into cloud, identity, and AI environments, and turning that knowledge into detection content that ships in the SentinelOne platform. Your research will power the Offensive Security Engine, which verifies whether exposed assets are actually exploitable, along with our cloud, identity, and AI security detections. This is a research role: you will spend your time understanding attacks deeply, reproducing them in a lab, and writing the detections that catch them. What Will You Do? Primary responsibilities include: Offensive Security Engine: research vulnerabilities and misconfigurations in internet-exposed services, reproduce them in a lab, and write exploit templates that safely confirm whether they are exploitable, with very few false positives. Cloud: research attack paths in AWS, Azure, and GCP, such as IAM privilege escalation, misconfigured services, cross-account or cross-tenant access, and Kubernetes and container attacks (RBAC abuse, container escape, exposed kubelets and dashboards, and cloud IAM-to-cluster paths across EKS, AKS, and GKE), and turn them into detections. Identity: research attacks against Entra ID and Active Directory, including hybrid paths between on-prem and cloud.