Home
Communities
Companies
- Companies
  
  Discover best places to work
- Compare Companies
  
  Compare & find best workplace
- Add Office Photos
  
  Bring your workplace to life
- Add Company Benefits
  
  Highlight your company's perks
Reviews
- Company reviews
  
  Read reviews for 6L+ companies
- Write a review
  
  Rate your former or current company
Salaries
- Browse salaries
  
  Discover salaries for 6L+ companies
- Salary calculator
  
  Calculate your take home salary
- Are you paid fairly?
  
  Check your market value
- Share your salary
  
  Help other jobseekers
Interviews
- Company interviews
  
  Read interviews for 40K+ companies
- Campus placements
  
  Interviews questions for 1K+ colleges
- Share interview questions
  
  Contribute your interview questions
Jobs
Awards

RATE NOW!
- ABECA 2025
  
  RATE NOW!
  
  AmbitionBox Employee Choice Awards - 4th Edition
- ABECA 2024
  
  AmbitionBox Employee Choice Awards - 3rd Edition
- AmbitionBox Best Places to Work 2022
  
  2nd Edition
- AmbitionBox Best Places to Work 2021
  
  1st Edition

Add office photos

Employer? Claim Account for FREE

SentinelOne

Compare

2.8

based on 27 Reviews

9 SentinelOne Jobs

Senior Windows Detection Engineer

Attivo Networks

2.8

based on 27 Reviews

2-5 years

Kolkata, Mumbai, New Delhi + 4 more

1 vacancy

Senior Windows Detection Engineer

SentinelOne

posted 9d ago

Job Role Insights

Flexible timing

Key skills for the job

Medical Coding Python C++ Packaging Analytical Chemistry Medical Insurance

+ 4 more

Job Description

We are seeking highly motivated individuals to join our Windows Behavioral Rules Team. The ideal candidates will have a strong background in cybersecurity, with a focus on Windows-based rule development for SIEM, EDR, XDR, or similar platforms. We are looking for team players, adept at crafting precise and effective detection rules, and committed to staying at the forefront of cybersecurity advancements. If you are passionate about contributing to innovative cybersecurity solutions, come join us and be part of our dynamic team at SentinelOne.

What will you do?

As a Windows Detection Engineer, you will play a key role in crafting, owning, and packaging default rules for our Windows agent. Your responsibilities will include creating rules that correlate different behavioral events collected from the OS, performing false positive analysis, and actively contributing to the ongoing enhancement of our detection capabilities.

You will be responsible for the following:

Develop precise and effective detection rules and deliver default rules for the WIN agent.
Rigorously analyze and assess false positives associated with the rules you create.
Contribute to the optimization of rules to minimize false positives and enhance detection accuracy.
Collaborate with the team to optimize existing default rules for superior detection capabilities.
Stay informed about emerging threats, industry trends, and new technologies to continuously improve rule efficacy.
Follow good detection engineering practices and the default rules you develop, including logic, descriptions, and other metadata, tests, and more.

What experience or knowledge should you bring?

2+ years of experience in Detection Engineering / Red Teaming / Offensive Research
Experience writing behavioral detection rules for EDR, XDR, SIEM or other similar platforms. Experience writing YARA or other types of static detections is nice to have.
Deep understanding of modern Windows attack TTPs (how malware operates, evasion, and exploitation techniques).
Understanding of Windows internals
Hands-on experience with coding in Python and C/C++.
Familiarity with Detection Engineering processes including prioritizing a backlog for research and development, writing unit and integration tests, and with CI/CD technologies such as Jenkins.
Strong analytical and problem-solving skills, with an understanding of false-positive analysis.
Excellent communication and collaboration skills within a team-oriented environment.

Advantage