SentinelOne Engineer (R-00249)

True Zero Technologies

1d

About The Position

True Zero Technologies is seeking a Certified SentinelOne Engineer to lead the operation, tuning, and optimization of SentinelOne in secure, mission-critical environments. The role includes using SentinelOne as a SIEM for centralized log management, detection, and correlation, and requires hands-on platform expertise alongside the ability to guide teams, engage clients, and deliver reliable endpoint and SIEM operations. The engineer will operate SentinelOne in production, tune detection policies, manage the agent fleet, and support SIEM log ingestion, correlation, and alerting. Experience with state government customers is a strong plus.

True Zero Technologies is a veteran-owned small business that designs and delivers cybersecurity programs and software solutions for government, education, and commercial organizations. Its endpoint and detection engineering practice focuses on governance, Zero Trust architecture, and alignment with the NIST Risk Management Framework and NIST SP 800-53.

The position requires current SentinelOne Certified Engineer certification and at least 3–5 years of relevant experience. A bachelor’s degree in a related field is preferred, though equivalent experience is considered. True Zero offers competitive salary, medical coverage, incentives, paid time off and holidays, a 401(k) match, monthly cell phone and home internet reimbursement, and parental leave.

Requirements

• Current SentinelOne Certified Engineer certification.
• At least 3–5 years of experience in endpoint security, detection engineering, or SOC operations, with substantial hands-on SentinelOne administration.
• Experience operating and optimizing SentinelOne as a SIEM platform, including log management, correlation, and alert tuning.
• Hands-on experience with EDR/XDR administration, policy tuning, Deep Visibility/Storyline queries, and threat-hunting workflows.
• Experience integrating EDR/SIEM platforms with SOAR, ticketing, and broader security tooling.
• Familiarity with NIST SP 800-53, Zero Trust architecture principles, and general security compliance frameworks.
• Excellent written and verbal communication skills for conveying technical information to diverse audiences.

Nice To Haves

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field; equivalent experience is also considered.
• Experience supporting state government (SLED) customers.
• Additional security certifications such as Security+, CySA+, or GCIH, or equivalent.
• Experience with other EDR/SIEM platforms such as Splunk or CrowdStrike.
• Prior experience at a Veteran-Owned Small Business or similar government-focused contractor.

Responsibilities

• Administer SentinelOne across managed environments, including agent deployment, policy management, and fleet health.
• Operate and optimize SentinelOne SIEM capabilities, including log ingestion, correlation rules, dashboards, and alerting.
• Design, tune, and validate detection policies and Deep Visibility/Storyline queries.
• Support threat triage, investigation, remediation, threat hunting, and root-cause analysis.
• Integrate SentinelOne with SIEM, SOAR, ticketing, and other security tools.
• Monitor agent health, policy coverage, and platform performance, and remediate gaps across the fleet.
• Manage SentinelOne upgrades, policy version control, and lifecycle changes while minimizing operational disruption.
• Ensure operations align with regulatory and security requirements, including NIST SP 800-53, Zero Trust principles, and applicable state-specific requirements.
• Deliver technical reports on endpoint and SIEM health, detection posture, and tuning outcomes, with actionable recommendations.
• Engage with clients and stakeholders throughout engagements, including state government customers when assigned.
• Coach and mentor junior engineers on SentinelOne operations and detection engineering practices.

Benefits

• Competitive salary, paid twice per month.
• True Zero covers 100% of medical premiums.
• Companywide new business incentive programs.
• Contribution incentives for items such as white papers, blog posts, and internal webinars.
• Three weeks of PTO to start and 11 paid holidays annually.
• 401(k) with 100% company match on the first 4%.
• Monthly reimbursement of cell phone and home internet costs.
• Paternity and maternity leave.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior