SentinelOne Engineer
Core
Lead administration, optimization, and detection engineering for the SentinelOne platform acting as an EDR/XDR and SIEM solution across mission-critical environments.
Role type
Senior SentinelOne Engineer (EDR/XDR & SIEM Operations)
Builds
Optimized endpoint security posture, detection policies, and integrated security workflows for clients.
Domain
Cybersecurity, Endpoint Detection and Response (EDR), Extended Detection and Response (XDR), Security Information and Event Management (SIEM)
Required skills
SentinelOne platform administration, EDR/XDR technologies, SIEM operations, detection policy tuning, threat hunting, SOAR integration, NIST compliance, Zero Trust principles, log analysis, incident response
Preferred skills
SLED government customer support, additional certifications (Security+, CySA+, GCIH), familiarity with Splunk and CrowdStrike, technical leadership/mentoring
Technologies
SentinelOne, SIEM, SOAR, NIST SP 800-53, Zero Trust, Deep Visibility, Storyline
Responsibilities
Lead day-to-day administration and management of SentinelOne across multiple managed environments; Manage and optimize SentinelOne's SIEM capabilities including log ingestion and correlation rules; Design, configure, and refine endpoint detection and response policies; Support triage, investigation, and remediation of threats; Integrate SentinelOne with SOAR, ticketing systems, and enterprise security tools; Mentor junior engineers on SentinelOne administration and cybersecurity best practices
Seniority
Senior, hands-on IC with technical leadership
