{"id":1612175,"url":"https://alion.io/job/att-senior-cybersecurity-endpoint-security-sentinelone-and-infrastructure-security","title":"Senior Cybersecurity – Endpoint Security (SentinelOne) and Infrastructure Security","company":{"id":1753140,"name":"AT&T","domain":"att.com","url":"https://alion.io/company/att-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Radancy","truth_index":{"grade":"A","score":100,"open_postings":92,"ghost_share":0,"stale_share":0.13,"repost_share":0,"time_to_fill_p50_days":21,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18500,"max_usd":40000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bash","optional":false},{"name":"CentOS Stream","optional":false},{"name":"CI/CD","optional":false},{"name":"DLP","optional":false},{"name":"GitHub","optional":false},{"name":"GitLab","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SentinelOne","optional":false},{"name":"Ubuntu","optional":false},{"name":"VMWare","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"Anomaly Detection","optional":true},{"name":"Copilot","optional":true},{"name":"Crowdstrike","optional":true},{"name":"Darktrace","optional":true},{"name":"EU AI Act","optional":true},{"name":"Hallucination","optional":true},{"name":"LLM","optional":true},{"name":"Machine Learning","optional":true},{"name":"NIST AI RMF","optional":true},{"name":"Prompt Engineering","optional":true}],"status":"live","first_seen_at":"2026-09-28T00:00:00Z","employer_posted_date":"2026-09-28","last_verified_at":"2026-10-21T07:14:51Z","board_verified":true,"closed_at":null,"days_open":23,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":23},"description":"Role - Senior Cybersecurity - Endpoint Security and Infrastructure Security (SentinelOne, Proofpoint, Guardicore, VPN and DLP security solutions)\nAbout the Company:\nJoin AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future-you’ll create it\nAbout the Role:\nOur team is seeking an experienced technologist to join our Cybersecurity team.\nWorking as a Senior Cybersecurity within CSO, you will work with application owners, business partners, and other CSO teams; to design, implement, and maintain AT&T endpoint and infrastructure security strategy. Focusing on protecting endpoints from threats (E.g. phishing, malware, data breaches) enact new security standards, and research emerging standards and protocols. The role involves creating, maintaining and enforcing robust endpoint security policies that align with AT&T's business needs and security best practices.\nRoles & Responsibilities:\nThe Individual in this role will\nArchitect and Lead SentinelOne Deployments: Design and implement SentinelOne, Proofpoint, Guardicore, VPN and DLP security solutions for a wide range of infrastructure and endpoints, ensuring scalable, resilient, and effective protection across:Multiple Linux distributions (RHEL, Ubuntu, CentOS, etc.)\nWindows Server (various versions)\nWindows and MacOS endpoints\nVirtual desktop infrastructure (HVDs)\nKubernetes clusters running on-prem and in cloud environments\n\nIntegration & Automation: Integrate with other security solutions and automation using APIs.\nSecurity Policy Management: Define, optimize, and enforce SentinelOne, Proofpoint, Guardicore, VPN and DLP security policies for different operating systems and device types, balancing security posture with operational requirements.\nThreat Detection & Incident Response: Collaborate with SOC and IR teams to tune SentinelOne, Proofpoint, Guardicore, VPN and DLP detections. Assist in the response to threats and the investigation of security incidents across the environment.\nCross-Platform Expertise: Provide deep technical expertise in handling endpoint security for heterogeneous systems, troubleshooting compatibility issues, and optimizing performance.\nTechnical Leadership & Documentation: Serve as the subject matter expert for endpoint security, producing architectural diagrams, technical documentation, runbooks, and best practices guides.\nCollaboration & Training: Partner with IT, DevOps, and security teams to ensure seamless integration with existing infrastructure and provide training on SentinelOne, Proofpoint, Guardicore, VPN and DLP usage and endpoint security hygiene.\nContinuous Improvement: Stay updated on emerging threats, SentinelOne, Proofpoint, Guardicore, VPN and DLP product updates, and industry best practices. Recommend enhancements to improve detection and response capabilities.\nRequired Skills:\nMinimum 10+ years in cybersecurity roles, with at least 4-6 years architecting and supporting large-scale endpoint and infrastructure protection platforms (preferably SentinelOne, Proofpoint, Guardicore, VPN and DLP).\nOperating system and Infrastructure Proficiency:Experience with Linux (multiple distros), MacOS and Windows server/client administration\nKnowledge of Virtual desktop infrastructure (VMware, Citrix, Azure Virtual Desktop)\nKnowledge of Kubernetes and application deployment.\n\nSecurity Frameworks: Familiarity with NIST, CIS, MITRE ATT&CK, and other security standards.Automation and coding: PowerShell, Bash, Python; CI/CD (GitHub/GitLab/Azure DevOps); API integration skills.\n\nExperience with the Singularity platform (EPP/EDR/XDR) is preferred.Familiarity with OT/IoT discovery and segmentation; network isolation strategies for branch and edge.\n\nCertified in Engineering and Administration areas of SentinelOne, Proofpoint, Guardicore, VPN and DLP, is highly desirable.\nThe candidate must have excellent analytical and problem-solving skills, be self-motivated and work independently\nSense of urgency and attention to detail.\nShould be flexible to work on weekends.\nShould be flexible to provide coverage in US morning hours.\nDesired Skills:\nFamiliarity with applying Artificial Intelligence (AI) or Machine Learning (ML) techniques in cybersecurity contexts (e.g., anomaly detection, threat hunting, behavioral analytics, or risk scoring).\nExperience leveraging AI-enabled tools (such as Copilot for Security, Darktrace, CrowdStrike Charlotte AI, or custom LLM integrations) to enhance detection, response, and automation workflows.\nUnderstanding of LLM safety, prompt engineering, or AI governance frameworks (e.g., NIST AI RMF, EU AI Act readiness) is a plus.\nExposure to data science fundamentals relevant to security (pattern recognition, supervised vs. unsupervised learning, model validation).\n Awareness of AI-driven risks (e.g., adversarial ML, data poisoning, model hallucination) and their mitigation within enterprise environments.\nInterest in leveraging GenAI for security operations, such as summarizing alerts, drafting reports, or automating incident triage.\nCISSP, CISM, SANS GIAC or relevant cybersecurity\nExcellent communication skills including metrics/performance documentation/presentation, technical drawing/architecture origination and modification\nOperates well under pressure and urgent circumstances\nSelf-reliant and diligent in follow-through for assigned tasks\nAbility to work with a geographically disperse team\nEngaged collaborator, contributor and team player\nExperience working in an environment where coordination with multiple teams is essential to success\nAbility to prioritize individual/group work in a high-stress and time-bound environment\nBachelor’s / Master's degree in Information Systems, Engineering, Mathematics. Computer Science or Cyber Security or equivalent experience.\n\"1. Familiarity with applying Artificial Intelligence (AI) or Machine Learning (ML) techniques in cybersecurity contexts (e.g., anomaly detection, threat hunting, behavioral analytics, or risk scoring).\n2. Experience leveraging AI-enabled tools (such as Copilot for Security, Darktrace, CrowdStrike Charlotte AI, or custom LLM integrations) to enhance detection, response, and automation workflows.\n3. Understanding of LLM safety, prompt engineering, or AI governance frameworks (e.g., NIST AI RMF, EU AI Act readiness) is a plus.\n4. Exposure to data science fundamentals relevant to security (pattern recognition, supervised vs. unsupervised learning, model validation).\n5. Awareness of AI-driven risks (e.g., adversarial ML, data poisoning, model hallucination) and their mitigation within enterprise environments.\n6. Interest in leveraging GenAI for security operations, such as summarizing alerts, drafting reports, or automating incident triage.\"\nAdditional Information:\nLocation: Hyderabad / Bengaluru\nWeekly Hours:\n40Time Type:\nRegularLocation:\nIND:AP:Hyderabad / Argus Bldg 4f & 5f, Sattva, Knowledge City- Adm: Argus Building, Sattva, Knowledge CityAT&T and its subsidiaries are committed to equal employment opportunity. All hiring, promotion, and other employment decisions remain merit-based and free from discrimination on the basis of race, color, religion, religious creed, national origin, ancestry, age, sex, sexual orientation, gender, gender identity, gender expression, physical disability, mental disability, pregnancy, medical condition, genetic information, marital status, citizenship status, military status, veteran status, or any other characteristic protected by federal, state, or local laws. In addition, AT&T will provide reasonable accommodations to qualified individuals with disabilities. AT&T is a fair chance employer and does not initiate a background check until an offer is made. Click here to learn more or request an application accommodation here.","description_format":"text","description_chars":8157,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Endpoint Security","Information Security","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-10-01T20:21:55Z"}],"visa":[],"liveness":{"score":43,"band":"fade","label":"Fading","p_open":1,"p_active":0.774,"p_room":0.55,"age_days":23,"expected_fill_days":21,"reasons":["conf:2","velocity","win:tail","comp:brand"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/att-senior-cybersecurity-endpoint-security-sentinelone-and-infrastructure-security","json_url":"https://alion.io/job/att-senior-cybersecurity-endpoint-security-sentinelone-and-infrastructure-security.json","meta":{"generated_at":"2026-10-21T10:57:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15478,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1753140},"rest":"https://alion.io/mcp/rest/get_company?id=1753140"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fatt-senior-cybersecurity-endpoint-security-sentinelone-and-infrastructure-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fatt-senior-cybersecurity-endpoint-security-sentinelone-and-infrastructure-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fatt-senior-cybersecurity-endpoint-security-sentinelone-and-infrastructure-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/att-senior-cybersecurity-endpoint-security-sentinelone-and-infrastructure-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fatt-senior-cybersecurity-endpoint-security-sentinelone-and-infrastructure-security"}]}