Staff Product Manager – EDR
Core
Own the alert lifecycle within SentinelOne's EDR platform, from policy configuration and detection logic through indicators, alert artifacts, exclusions, and mitigation.
Role type
Staff Product Manager (Endpoint Detection and Response)
Builds
Autonomous detection and response capabilities for endpoint, cloud, identity, data, and AI systems
Domain
Cybersecurity / Endpoint Security / AI-driven Threat Detection
Deliverable
production ML models | product features
Required skills
Endpoint security product management, Detection engineering, MITRE ATT&CK framework, False-positive rate optimization, Telemetry/log analysis, SQL querying, Agent-level concepts (kernel drivers, ETW, syscall hooking), AI threat landscape knowledge
Preferred skills
Hands-on experience as threat hunter, security researcher, SOC analyst, or agent developer
Technologies
SentinelOne EDR platform, MITRE ATT&CK, ATLAS, SQL, Kernel drivers, ETW, Syscall hooking
Responsibilities
Define product features and roadmap for the alert lifecycle domain, Partner with Detection Engineering and Threat Research on IOC strategy, Collaborate with Data/ML teams on model-driven detections, Engage with customers and SOC analysts to drive roadmap decisions, Define and track success metrics for the domain
Seniority
Staff, hands-on IC
