SentinelOne Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Take charge of the daily management of SentinelOne within controlled environments, which includes agent deployment, policy administration, and fleet health monitoring.

• Manage and consistently enhance the SIEM functionalities of SentinelOne, covering aspects such as log ingestion, correlation rules, dashboards, and alerting.

• Create, adjust, and verify detection policies along with Deep Visibility/Storyline queries.

• Aid in the triage, investigation, and resolution of threats identified by SentinelOne, including threat hunting and root-cause analyses.

• Integrate SentinelOne with SIEM, SOAR, ticketing systems, and other security tools.

• Oversee agent health, policy coverage, and platform performance; detect and address any deficiencies within the managed fleet.

• Handle SentinelOne upgrades, policy version management, and lifecycle modifications while minimizing operational interruptions.

• Ensure that SentinelOne operations comply with regulatory and security standards, such as NIST SP 800-53, Zero Trust principles, and relevant state-specific guidelines.

• Produce technical reports on endpoint and SIEM health, detection posture, and tuning results, complete with actionable recommendations.

• Interact with clients and stakeholders throughout the engagement lifecycle, particularly with assigned state government customers.

• Mentor and guide junior engineers in SentinelOne operations and best practices in detection engineering.

⛳️ Requirements

• Must possess current SentinelOne Certified Engineer certification.

• A minimum of 3 to 5 years of experience in endpoint security, detection engineering, or SOC operations, with significant hands-on experience in SentinelOne administration.

• Required proficiency in the ongoing operations and enhancement of SentinelOne as a SIEM platform, including log management, correlation, and alert tuning.

• Practical experience in EDR/XDR administration, policy tuning, Deep Visibility/Storyline queries, and threat hunting workflows.

• Experience in integrating EDR/SIEM platforms with SOAR, ticketing systems, and broader security tools.

• Understanding of NIST SP 800-53, Zero Trust architectural principles, and general security compliance frameworks.

• Exceptional written and verbal communication skills to present technical information to varied audiences.

• A Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field is preferred; equivalent experience will be considered.

• Experience working with state government (SLED) customers is advantageous.

• Additional security certifications (e.g., Security+, CySA+, GCIH, or equivalent) are desirable.

• Familiarity with other EDR/SIEM platforms (e.g., Splunk, CrowdStrike) is beneficial.

• Previous experience at a Veteran-Owned Small Business or a similar contractor focused on government services is a plus.

🏝️ Benefits

• A competitive salary, paid bi-monthly.

• Comprehensive medical coverage — True Zero covers 100% of medical premiums.

• Incentive programs for companywide new business initiatives.

• Contribution incentives for white papers, blog posts, internal webinars, etc.

• Starting with 3 weeks of PTO, plus 11 paid holidays each year.

• 401(k) plan with a 100% company match on the first 4% contributed.

• Monthly reimbursements for cell phone and home internet expenses.

• Paid paternity and maternity leave.