Job Overview
Location
Italy
Job Type
Full-time
Category
Software Engineering
Date Posted
May 19, 2026
Full Job Description
đź“‹ Description
- • As a Senior Windows Identity Detection Engineer at SentinelOne, you will research and detect emerging identity threats by developing behavior-based detection methods to protect millions of Windows endpoints globally. Your work will directly strengthen the security of enterprises and critical infrastructure by identifying and preventing sophisticated attacks such as Pass-the-Hash, Silver Ticket, and MFA bypass.
- • You will be responsible for end-to-end behavior-based detection capabilities: researching attack techniques, designing detection methods, and implementing them in the product using C++23 and Lua scripting. You’ll develop and use internal research tools and PoCs to discover new ways to detect and prevent identity-based attacks, ensuring your contributions translate into real-world protection.
- • You’ll join SentinelOne’s AI-native security platform team, a mission-driven group of builders and innovators shaping the future of cybersecurity. The company unifies protection across endpoint, cloud, identity, data, and AI systems to deliver autonomous detection and response, reducing noise and empowering security teams to focus on what matters most.
- • In this role, you’ll expand your expertise beyond Windows security to significantly influence the buildout of SentinelOne’s identity security business from the ground up. You’ll deepen your skills in threat research, low-level Windows internals, and behavior-based detection while working on impactful, globally relevant security challenges.
🎯 Requirements
- • 3+ years of experience in malware analysis (statically and dynamically)
- • 3+ years of experience with C++; knowledge of Lua or similar scripting language is an advantage
- • Excellent understanding of Windows Internals, including core system components such as Processes, Threads, and Virtual Memory
- • Experience with analysis tools such as IDA, WinDBG, and SysInternals
- • Experience with identity-based attacks (Pass-the-Hash, Silver Ticket, MFA bypass) is a big plus
- • Kernel development experience or understanding of existing AV internals is an advantage
🏖️ Benefits
- • Restricted Stock Units (RSUs) and Employee Stock Purchase Plan (ESPP)
- • Competitive leave benefits and gender-neutral parental leave
- • Medical and insurance benefits, pension, and Employee Assistance Program (EAP)
- • Global home office allowance and mobile phone reimbursement
- • Flexible working hours and 100% remote work option
- • Optional membership in major coworking chains and relocation assistance to the Czech Republic for eligible candidates
Skills & Technologies
C++
Senior
Remote
About Sentinel Laboratories Ltd
UK-based manufacturer of infection-control and hygiene products for healthcare and industrial markets. Offers spill kits, disinfectants, detergents, surface wipes, and PPE for blood-borne pathogens, C. difficile, TB, and COVID-19. Provides training resources and regulatory support for infection-prevention protocols in hospitals, clinics, dental practices, and laboratories worldwide.
Get more remote jobs like this
Subscribe to the weekly newsletter for similar remote roles and curated hiring updates.
Newsletter
Weekly remote jobs and featured talent.
No spam. Only curated remote roles and product updates. You can unsubscribe anytime.
Similar Opportunities
ICF International, Inc.
Reston, VA
Full-time
Expires Jul 16, 2026
DevOps
Remote
Degree Required
3 days ago
