SentinelOne EDR Engineer

- Evaluate the current SentinelOne deployment and detection content, then identify gaps, risks, and improvement opportunities.

- Migrate and optimize data sources and detection content.

- Integrate SentinelOne with other security tools to strengthen the overall monitoring ecosystem.

- Design and maintain SentinelOne data models that support security use cases and compliance reporting.

- Develop, tune, and optimize detection rules and alerts in SentinelOne to reduce false positives and improve detection quality.

- Partner with SentinelOne Wayfinder MDR and the customer’s SOC on alert flow, triage, investigation, and response.

- Manage and optimize the SentinelOne endpoint deployment and prepare architecture and processes for growth in a hybrid environment with global data centers.

- Improve SOC processes, playbooks, and reporting beyond pure detection content.

- Lead knowledge transfer and upskilling so the customer’s team can sustain and operate the environment.

- Provide technical expertise during security incidents and help coordinate response activities.

- 8+ years of security engineering experience, with significant hands-on SentinelOne Singularity (and preferably SentinelOne AI SIEM) work.

- CISSP certification (or equivalent experience).

- SentinelOne certification(s) and/or SentinelOne University experience.

- Experience administering and optimizing SentinelOne in enterprise environments.

- Experience working with SentinelOne Wayfinder/Vigilance MDR alongside an internal SOC.

- Strong detection engineering and alert-tuning skills.

- Ability to lead, mentor, and upskill a team through documentation and knowledge transfer.

- Strong incident response and troubleshooting skills.

- Must be authorized to work in the US.

- On-site in San Jose, CA up to 4 days per week.

- Occasional on-call support for security incidents as needed.

- Collaboration with cross-functional security teams.

- Minimum 3-month commitment (with potential for extension).