Sr. DFIR Analyst
Sentinellabs · United States
About this role
**Sr. DFIR Analyst** **About the Role** Serve as technical lead on small to medium-sized breach response investigations for SentinelOne's 24x7x365 DFIR team. Own case-level evidence and documentation quality end-to-end, partnering with Engagement Managers on scoping, strategy, and customer communications. **Key Responsibilities** • Lead DFIR engagements and direct analytical focus • Conduct EDR-driven incident response and advanced forensic analysis (endpoint, network, cloud, SaaS) • Develop containment guidance and remediation recommendations • Acquire and preserve forensic evidence following chain-of-custody procedures • Own evidence handling, documentation standards, and investigative report quality • Lead case handovers across regions • Mentor junior analysts on technical methodology and best practices • Manage triage in high-pressure, large-scale incidents • Build scripts and tooling to streamline workflows • Participate in rotating on-call schedule (weekends/holidays) • Maintain awareness of emerging threats and attacker techniques **Required Experience** • Bachelor's or Master's degree in Digital Forensics, Cybersecurity, Computer Science, or equivalent • 4+ years hands-on experience in digital forensics, incident response, or threat hunting • Demonstrated experience leading complex breach response engagements • Expert-level experience with forensic tools (X-Ways Forensics, Axiom, FTK) • Strong EDR/XDR and SIEM platform experience • Proficiency with Windows, Linux, and macOS environments • Network forensics and cloud incident response knowledge (AWS, Azure, or GCP) • Dynamic malware analysis and reverse engineering experience • Endpoint-based threat hunting experience • Python scripting ability • Strong technical writing and stakeholder communication skills **Compensation & Benefits** **Base Salary:** $108,000 – $130,000 USD (varies by location) **Equity & Rewards:** RSUs, ESPP **Time Off:** Flexible PTO, paid holidays, paid sick time, parental leave, grandparent leave **Insurance:** Medical, dental, vision, 401(k) match, life/disability, FSA, EAP, legal services, pet insurance **Wellness:** Home office allowance, mobile reimbursement, wellness coaching, gym reimbursement, fertility coverage, adoption/surrogacy reimbursement **Equal Opportunity Employer** SentinelOne does not discriminate based on race, religion, color, national origin, gender, sexual orientation, gender identity, age, veteran status, disability, or other legally protected characteristics. E-Verify participant for U.S. roles.
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.