SentinelOne EDR Engineer
About The Position
UltraViolet Cyber is hiring a Senior Security EDR Engineer for its Dedicated Defense model. The role focuses on optimizing SentinelOne EDR functionality for a Fortune 250 customer, leading a transformative security and technology project, and guiding a global team in developing EDR optimization methodology and best practices. The position involves improving the customer’s SentinelOne deployment, detection capabilities, integrations, SOC processes, and readiness for growth in a hybrid environment with global data centers. The engineer will also support incident response and help the customer’s team sustain and operate the environment through knowledge transfer and upskilling. The role is on-site in San Jose, California, up to four days per week. It requires authorization to work in the United States, occasional on-call support for security incidents as needed, and a minimum three-month commitment with potential for extension. The listed salary range is $130,000–$175,000 per year.
Requirements
- At least 8 years of security engineering experience, including significant hands-on SentinelOne Singularity work; SentinelOne AI SIEM experience is preferred.
- CISSP certification or equivalent experience.
- SentinelOne certification(s) and/or experience with SentinelOne University.
- Experience administering and optimizing SentinelOne in enterprise environments.
- Experience working with SentinelOne Wayfinder/Vigilance MDR alongside an internal SOC.
- Strong detection engineering and alert-tuning skills.
- Ability to lead, mentor, and upskill a team through documentation and knowledge transfer.
- Strong incident response and troubleshooting skills.
- Experience with Zero Trust architecture and endpoint security modernization.
- Experience with enterprise endpoint management platforms.
- Experience integrating SentinelOne with other security tools.
- Must be authorized to work in the United States.
- Available for on-site work in San Jose, California, up to four days per week.
- Available for occasional on-call support for security incidents as needed.
- Able to make a minimum three-month commitment, with potential for extension.
Nice To Haves
- SentinelOne AI SIEM experience.
Responsibilities
- Evaluate the current SentinelOne deployment and detection content, identifying gaps, risks, and opportunities for improvement.
- Migrate and optimize data sources and detection content.
- Integrate SentinelOne with other security tools to strengthen the monitoring ecosystem.
- Design and maintain SentinelOne data models supporting security use cases and compliance reporting.
- Develop, tune, and optimize SentinelOne detection rules and alerts to reduce false positives and improve detection quality.
- Partner with SentinelOne Wayfinder MDR and the customer’s SOC on alert flow, triage, investigation, and response.
- Manage and optimize SentinelOne endpoint deployment and prepare architecture and processes for growth in a hybrid environment with global data centers.
- Improve SOC processes, playbooks, and reporting beyond detection content.
- Lead knowledge transfer and upskilling so the customer’s team can sustain and operate the environment.
- Provide technical expertise during security incidents and help coordinate response activities.
- Lead a global team developing methodology for EDR optimization and best practices.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Career Level
Senior
Education Level
No Education Listed
