DFIR Analyst
Sentinellabs · United States
About this role
**DFIR Analyst** **About the Role** Serve as technical lead on small to medium-sized breach response investigations for SentinelOne's 24x7x365 DFIR team. Own case-level evidence and documentation quality end-to-end, partnering with Engagement Managers on scoping, strategy, and customer communications. **Key Responsibilities** • Lead DFIR engagements and direct analytical focus • Conduct EDR-driven incident response and advanced forensic analysis (endpoint, network, cloud, SaaS) • Develop containment guidance and remediation recommendations • Acquire and preserve forensic evidence following chain-of-custody procedures • Own evidence handling, documentation standards, and investigative report quality • Lead case handovers across regions • Mentor junior analysts on technical methodology and best practices • Manage triage in high-pressure, large-scale incidents • Build scripts and tooling to streamline workflows • Participate in rotating on-call schedule • Track hours accurately and maintain awareness of emerging threats **Required Experience** • Bachelor's or Master's degree in Digital Forensics, Cybersecurity, Computer Science, or related field (or equivalent) • 4+ years hands-on experience in digital forensics, incident response, or threat hunting • Demonstrated lead experience on complex breach response engagements • Expert-level proficiency with X-Ways Forensics, Axiom, FTK • Strong EDR/XDR and SIEM experience (SentinelOne preferred) • Comfort with Windows, Linux, and macOS environments • Network forensics and cloud incident response knowledge (AWS, Azure, or GCP) • Dynamic malware analysis and reverse engineering experience • Endpoint threat hunting experience • Python scripting ability • Strong technical writing and stakeholder communication skills **Compensation & Benefits** **Base Salary:** $108,000 – $120,000 USD (varies by location) **Equity & Rewards:** RSUs, ESPP **Time Off:** Flexible PTO, paid holidays, paid sick time, parental leave, grandparent leave **Insurance:** Medical, dental, vision, 401(k) match, life/disability, FSA, EAP, legal services, pet insurance **Perks:** Home office allowance, mobile reimbursement, wellness coaching, gym reimbursement, fertility coverage, adoption/surrogacy reimbursement **Equal Opportunity Employer** SentinelOne does not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, disability status, or other protected characteristics. E-Verify participant for U.S. roles.
Listing freshness
CronJobs last confirmed this listing 23h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.