Want to know if this job is worth applying to?
San Jose, California, United States
Onsite
- Evaluate the current SentinelOne deployment and detection content, then identify gaps, risks, and improvement opportunities.
- Migrate and optimize data sources and detection content.
- Integrate SentinelOne with other security tools to strengthen the overall monitoring ecosystem.
- Design and maintain SentinelOne data models that support security use cases and compliance reporting.
- Develop, tune, and optimize detection rules and alerts in SentinelOne to reduce false positives and improve detection quality.
- Partner with SentinelOne Wayfinder MDR and the customer’s SOC on alert flow, triage, investigation, and response.
- Manage and optimize the SentinelOne endpoint deployment and prepare architecture and processes for growth in a hybrid environment with global data centers.
- Improve SOC processes, playbooks, and reporting beyond pure detection content.
- Lead knowledge transfer and upskilling so the customer’s team can sustain and operate the environment.
- Provide technical expertise during security incidents and help coordinate response activities.
- 8+ years of security engineering experience, with significant hands-on SentinelOne Singularity (and preferably SentinelOne AI SIEM) work.
- CISSP certification (or equivalent experience).
- SentinelOne certification(s) and/or SentinelOne University experience.
- Experience administering and optimizing SentinelOne in enterprise environments.
- Experience working with SentinelOne Wayfinder/Vigilance MDR alongside an internal SOC.
- Strong detection engineering and alert-tuning skills.
- Ability to lead, mentor, and upskill a team through documentation and knowledge transfer.
- Strong incident response and troubleshooting skills.
- Experience with Zero Trust architecture and endpoint security modernization.
- Experience with enterprise endpoint management platforms.
- Experience integrating SentinelOne with other security tools.
- Must be authorized to work in the US.
- On-site in San Jose, CA up to 4 days per week.
- Occasional on-call support for security incidents as needed.
- Collaboration with cross-functional security teams.
- Minimum 3-month commitment (with potential for extension).
