DFIR Incident Manager at SentinelOne

Department: 13100 DFIR

Language

Setup: Remote, Hybrid
Location: Prague
Type: Full-time
Level: senior
Posted: Sep 10, 2026

Description

SentinelOne is hiring a DFIR Incident Manager to oversee digital forensics and incident response engagements from intake through delivery. The role leads scoping, resource allocation, client and stakeholder communication, technical validation, evidence handling, post-engagement reviews, and process improvement, while also contributing to endpoint forensics, log analysis, and threat hunting. Candidates should have at least five years of hands-on consulting experience in digital forensics and incident response, along with project management, client communication, and security technology expertise. The position offers hybrid work in Prague or Brno, or remote work in the Czech Republic or Slovakia, with Prague-based employees required to work from the office at least two days per week.

Required Skills

Digital forensics
Incident response
Project management
Client communication
EDR/XDR
Endpoint forensics
Log analysis
Threat hunting
Malware analysis
Memory forensics

Additional Information

Required Previous Experiences: 5+ years of hands-on consulting experience in digital forensics and incident response
Managing complex engagements
Project management and team leadership
Experience working with legal teams and cyber insurance carriers
Endpoint-based threat hunting, compromise assessments, and cyber threat intelligence
Preferred Qualifications: Malware analysis and memory forensics experience
GCFE, GCFA, CFCE, EnCE, or similar certifications
Active participation in the security community through speaking engagements or publications