SentinelOne EDR Engineer

- Evaluate the current SentinelOne deployment and detection content, then identify gaps, risks, and improvement opportunities. 

- Migrate and optimize data sources and detection content. 

- Integrate SentinelOne with other security tools to strengthen the overall monitoring ecosystem. 

- Design and maintain SentinelOne data models that support security use cases and compliance reporting. 

- Develop, tune, and optimize detection rules and alerts in SentinelOne to reduce false positives and improve detection quality. 

- Partner with SentinelOne Wayfinder MDR and the customer’s SOC on alert flow, triage, investigation, and response. 

- Manage and optimize the SentinelOne endpoint deployment and prepare architecture and processes for growth in a hybrid environment with global data centers. 

- Improve SOC processes, playbooks, and reporting beyond pure detection content. 

- Lead knowledge transfer and upskilling so the customer’s team can sustain and operate the environment. 

- Provide technical expertise during security incidents and help coordinate response activities.

- 8+ years of security engineering experience, with significant hands-on SentinelOne Singularity (and preferably SentinelOne AI SIEM) work. 

- CISSP certification (or equivalent experience). 

- SentinelOne certification(s) and/or SentinelOne University experience. 

- Experience administering and optimizing SentinelOne in enterprise environments. 

- Experience working with SentinelOne Wayfinder/Vigilance MDR alongside an internal SOC. 

- Strong detection engineering and alert-tuning skills. 

- Ability to lead, mentor, and upskill a team through documentation and knowledge transfer. 

- Strong incident response and troubleshooting skills. 

- Must be authorized to work in the US. 

- On-site in San Jose, CA up to 4 days per week. 

- Occasional on-call support for security incidents as needed. 

- Collaboration with cross-functional security teams. 

- Minimum 3-month commitment (with potential for extension).