Home
Communities
Companies
- Companies
  
  Discover best places to work
- Compare Companies
  
  Compare & find best workplace
- Add Office Photos
  
  Bring your workplace to life
- Add Company Benefits
  
  Highlight your company's perks
Reviews
- Company reviews
  
  Read reviews for 6L+ companies
- Write a review
  
  Rate your former or current company
Salaries
- Browse salaries
  
  Discover salaries for 6L+ companies
- Salary calculator
  
  Calculate your take home salary
- Are you paid fairly?
  
  Check your market value
- Share your salary
  
  Help other jobseekers
- Gratuity calculator
  
  Check your gratuity amount
- HRA calculator
  
  Check how much of your HRA is tax-free
- Salary hike calculator
  
  Check your salary hike
Interviews
- Company interviews
  
  Read interviews for 40K+ companies
- Campus placements
  
  Interviews questions for 2K+ colleges
- Share interview questions
  
  Contribute your interview questions
Jobs
Awards

WINNERS AWAITED!
- ABECA 2025
  
  WINNERS AWAITED!
  
  AmbitionBox Employee Choice Awards - 4th Edition
- ABECA 2024
  
  AmbitionBox Employee Choice Awards - 3rd Edition
- AmbitionBox Best Places to Work 2022
  
  2nd Edition
- AmbitionBox Best Places to Work 2021
  
  1st Edition

Add office photos

Employer? Claim Account for FREE

SentinelOne

Compare

3.0

based on 30 Reviews

17 SentinelOne Jobs

Senior Windows Detection Engineer

Attivo Networks

3.0

based on 30 Reviews

5-10 years

Kolkata, Mumbai, New Delhi + 4 more

1 vacancy

Senior Windows Detection Engineer

SentinelOne

posted 1mon ago

Job Role Insights

Flexible timing

Key skills for the job

Medical Coding Python C++ Packaging Analytical Chemistry Medical Insurance

+ 4 more

Job Description

About Us:

SentinelOne is defining the future of cybersecurity through our XDR platform that automatically prevents, detects, and responds to threats in real-time. Singularity XDR ingests data and leverages our patented AI models to deliver autonomous protection. With SentinelOne, organizations gain full transparency into everything happening across the network at machine speed - to defeat every attack, at every stage of the threat lifecycle.

We are a values-driven team where names are known, results are rewarded, and friendships are formed. Trust, accountability, relentlessness, ingenuity, and OneSentinel define the pillars of our collaborative and unified global culture. Were looking for people that will drive team success and collaboration across SentinelOne. If you re enthusiastic about innovative approaches to problem-solving, we would love to speak with you about joining our team!

What are we looking for?

We are seeking highly motivated individuals to join our Windows Behavioral Rules Team. The ideal candidates will have a strong background in cybersecurity, with a focus on Windows-based rule development for SIEM, EDR, XDR, or similar platforms. We are looking for team players, adept at crafting precise and effective detection rules, and committed to staying at the forefront of cybersecurity advancements. If you are passionate about contributing to innovative cybersecurity solutions, come join us and be part of our dynamic team at SentinelOne.

What will you do?

As a Windows Detection Engineer, you will play a key role in crafting, owning, and packaging default rules for our Windows agent. Your responsibilities will include creating rules that correlate different behavioral events collected from the OS, performing false positive analysis, and actively contributing to the ongoing enhancement of our detection capabilities.

You will be responsible for the following:

Develop precise and effective detection rules and deliver default rules for the WIN agent.
Rigorously analyze and assess false positives associated with the rules you create.
Contribute to the optimization of rules to minimize false positives and enhance detection accuracy.
Collaborate with the team to optimize existing default rules for superior detection capabilities.
Stay informed about emerging threats, industry trends, and new technologies to continuously improve rule efficacy.
Follow good detection engineering practices and the default rules you develop, including logic, descriptions, and other metadata, tests, and more.

What experience or knowledge should you bring?

2+ years of experience in Detection Engineering / Red Teaming / Offensive Research
Experience writing behavioral detection rules for EDR, XDR, SIEM or other similar platforms. Experience writing YARA or other types of static detections is nice to have.
Deep understanding of modern Windows attack TTPs (how malware operates, evasion, and exploitation techniques).
Understanding of Windows internals
Hands-on experience with coding in Python and C/C++.
Familiarity with Detection Engineering processes including prioritizing a backlog for research and development, writing unit and integration tests, and with CI/CD technologies such as Jenkins.
Strong analytical and problem-solving skills, with an understanding of false-positive analysis.
Excellent communication and collaboration skills within a team-oriented environment.

Advantage

Experience in malware analysis (statically and dynamically) and reverse engineering (x86/x64).
Understanding of existing EDR internals.

Why us?
You will be joining a cutting-edge company, where you will tackle extraordinary challenges and work with the very best in the industry along with competitive compensation.

Flexible working hours and hybrid/remote work model.
Flexible Time Off.
Flexible Paid Sick Days.
Global gender-neutral Parental Leave (16 weeks, beyond the leave provided by the local laws)
Generous employee stock plan in the form of RSUs (restricted stock units)
On top of RSUs, you can benefit from our attractive ESPP (employee stock purchase plan)
Gym membership/sports gears by Cultfit.
Wellness Coach app, with 3,000+ on-demand sessions, daily interactive classes, audiobooks, and unlimited private coaching.
Private medical insurance plan for you and your family.
Life Insurance covered by S1 (for employees)
Telemedical app consultation (Practo)
Global Employee Assistance Program (confidential counseling related to both personal and work life matters)
High-end MacBook or Windows laptop.
Home-office-setup allowances (one time) and maintenance allowance.
Internet allowances.
Provident Fund and Gratuity (as per govt clause)
NPS contribution (Employee contribution)
Half yearly bonus program depending on the individual and company performance.
Above standard referral bonus as per policy.
Udemy Business platform for Hard/Soft skills Training & Support for your further educational activities/trainings
Sodexo food coupons.