DFIR Analyst at SentinelOne

Department: 13100 DFIR

Language

Location: Israel
Type: Full-time
Level: mid
Posted: Sep 10, 2026

Description

SentinelOne is hiring a Digital Forensics and Incident Response (DFIR) Analyst to deliver rapid, evidence-based breach response for global enterprises. The role performs EDR-driven incident response, forensic analysis, threat hunting, malware and memory analysis, evidence acquisition, containment, hardening, documentation, reporting, and incident handovers across endpoint, network, cloud, and SaaS environments. It requires a bachelor's or master's degree or equivalent practical self-study, at least two years of relevant experience, and familiarity with forensic tools, EDR/XDR platforms, SIEMs, scripting, and technical communication. The role includes rotating weekend and holiday on-call coverage and offers medical and insurance benefits, equity, leave, and other employee benefits.

Required Skills

EDR response
Forensic analysis
Threat hunting
Malware analysis
Memory analysis
Chain of custody
Scripting
Network forensics
MITRE ATT&CK

Additional Information

Minimum Education: Bachelor's or master's degree in Digital Forensics, Cybersecurity, Computer Science, or a related technical field, or equivalent practical self-study
Required Previous Experiences: At least two years of hands-on experience in digital forensics, incident response, or threat hunting
Preferred Qualifications: Experience in a consulting or services delivery environment
Experience with SentinelOne EDR/XDR platforms
Knowledge of Linux and macOS forensic analysis
Exposure to AWS, Azure, or GCP cloud environments
Memory analysis
Foundational malware analysis experience
Understanding of reverse engineering
Endpoint threat hunting
Cyber threat intelligence platforms
MITRE ATT&CK framework
AI-assisted tools
Relevant industry certifications such as GCFE, GCFA, GREM, CFCE, or EnCE