SentinelOne EDR Engineer
What You'll Do:
- Evaluate the current SentinelOne deployment and detection content, then identify gaps, risks, and improvement opportunities.
- Migrate and optimize data sources and detection content.
- Integrate SentinelOne with other security tools to strengthen the overall monitoring ecosystem.
- Design and maintain SentinelOne data models that support security use cases and compliance reporting.
- Develop, tune, and optimize detection rules and alerts in SentinelOne to reduce false positives and improve detection quality.
- Partner with SentinelOne Wayfinder MDR and the customer’s SOC on alert flow, triage, investigation, and response.
- Manage and optimize the SentinelOne endpoint deployment and prepare architecture and processes for growth in a hybrid environment with global data centers.
- Improve SOC processes, playbooks, and reporting beyond pure detection content.
- Lead knowledge transfer and upskilling so the customer’s team can sustain and operate the environment.
- Provide technical expertise during security incidents and help coordinate response activities.
What You've Done:
- 8+ years of security engineering experience, with significant hands-on SentinelOne Singularity (and preferably SentinelOne AI SIEM) work.
- CISSP certification (or equivalent experience).
- SentinelOne certification(s) and/or SentinelOne University experience.
- Experience administering and optimizing SentinelOne in enterprise environments.
- Experience working with SentinelOne Wayfinder/Vigilance MDR alongside an internal SOC.
- Strong detection engineering and alert-tuning skills.
- Ability to lead, mentor, and upskill a team through documentation and knowledge transfer.
- Strong incident response and troubleshooting skills.
- Experience with Zero Trust architecture and endpoint security modernization.
- Experience with enterprise endpoint management platforms.
- Experience integrating SentinelOne with other security tools.
Work Environment:
- Must be authorized to work in the US.
- On-site in San Jose, CA up to 4 days per week.
- Occasional on-call support for security incidents as needed.
- Collaboration with cross-functional security teams.
- Minimum 3-month commitment (with potential for extension).
Skills
As published by lever · 5 questions · 5 written answers
Resume/CV, Full name, Pronouns, Email, Phone, Current location, Current company, LinkedIn URL, Twitter URL, GitHub URL, Portfolio URL, Other website
- Are you legally authorized to work in the US?
- Do you now or in the future require Visa sponsorship?
- What is your experience with SentinelOne?
- How many days per week can you be onsite in San Jose, CA?
- What is your target salary?