DFIR Analyst at SentinelOne

Department: 13100 DFIR

Language

Setup: Hybrid
Location: Prague
Type: Full-time
Level: mid
Posted: Sep 10, 2026

Description

SentinelOne is hiring a DFIR Analyst to deliver rapid, evidence-based breach response for global enterprises. The role performs EDR-driven incident response, forensic analysis, threat hunting, malware and memory analysis, evidence acquisition, containment, hardening, documentation, reporting, and incident handovers across endpoint, network, cloud, and SaaS environments. The position requires a bachelor's or master's degree or equivalent practical self-study plus at least two years of relevant experience, and offers hybrid work in Prague, Brno, or remote work in the Czech Republic or Slovakia.

Required Skills

EDR response
Forensic analysis
Threat hunting
Malware analysis
Chain of custody
Scripting
Network forensics
Memory analysis
Cloud forensics

Additional Information

Minimum Education: Bachelor's or master's degree in Digital Forensics, Cybersecurity, Computer Science, or a related technical field, or equivalent practical self-study
Required Previous Experiences: At least two years of hands-on experience in digital forensics, incident response, or threat hunting
Preferred Qualifications: Experience with X-Ways Forensics, Axiom, FTK, EDR/XDR, SIEMs, network protocols, and network-based forensic analysis
Knowledge of Linux and macOS forensics, cloud environments, memory analysis, malware analysis, and reverse engineering
Familiarity with endpoint threat hunting, cyber threat intelligence, MITRE ATT&CK, and AI-assisted tools
Relevant industry certifications such as GCFE, GCFA, GREM, CFCE, or EnCE