{"id":177470,"url":"https://alion.io/job/sentinelone-principal-software-engineer-ai-siem","title":"Principal Software Engineer, AI SIEM","company":{"id":46,"name":"SentinelOne","domain":"sentinelone.com","url":"https://alion.io/company/sentinelone","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":80,"open_postings":21,"ghost_share":0,"stale_share":0.81,"repost_share":0,"time_to_fill_p50_days":48,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Backend","role_family":"Backend","seniority":"lead","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":216000,"max":297000,"currency":"USD","period":"year","gross":null,"usd_annual":297000},"salary_estimate":null,"experience_years_min":15,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-07-28T20:10:09Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-18T09:06:36Z","board_verified":true,"closed_at":null,"days_open":81,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":81},"description":"Our Purpose \nAt SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them becomes more critical than ever. When you join SentinelOne, your work helps protect global enterprises, critical infrastructure, and the technologies shaping tomorrow. If you are motivated by meaningful challenges and want your impact to be real, measurable, and global, you will find purpose here.\nAbout Us \nSentinelOne is a company at the intersection of AI and security, pioneering a new operating model for cybersecurity. Our AI-native platform unifies protection across endpoint, cloud, identity, data, and AI systems to deliver autonomous detection and response with clarity and speed. By combining real-time analytics, intelligent automation, and a unified data foundation, we reduce noise, simplify complexity, and empower security teams to focus on what truly matters.\nOur teams are builders, problem-solvers, and innovators committed to shaping the future of security. If you are excited to solve hard problems alongside talented, mission-driven people, we invite you to help us build a safer future for humanity.\nWhat Are We Looking For?\nWe’re looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes.\nAs a Principal Software Engineer, AI SIEM, you will be tasked with reasoning across all three layers of SentinelOne's AI SIEM: how data moves and gets queried at scale, how analysts actually work with what the system surfaces, and how detections get built and tuned. Our AI SIEM ingests petabytes of data per day, powers the analyst workflows that turn that data into alerts, findings, assets, and incidents, and drives the detection engines, both rule-based and AI-driven, that catch what matters. You will look at the system as a whole, find where it's exceptional, where it has gaps, where it has redundant or overlapping effort, and drive the architectural decisions that close those gaps.\nThis is not a role scoped to one service or one team's backlog. It's for someone who can sit above the individual pillars, understand how they're supposed to fit together, and act when they don't.\nWhat Will You Do?\nPrimary responsibilities include:\nBuild a working mental model of the full system, including ingest and storage, query and retrieval, analyst-facing workflows (alerts, findings, assets, incidents), and the detection engines (rule-based and beyond), and use it to identify where architecture is solid, where it's fragile, and where teams are unknowingly duplicating effort or leaving gaps between their boundaries.\nDrive cross-team architectural decisions that affect multiple parts of the system at once, for example, how ingest-time enrichment should relate to detection logic, or how detection output should shape what an analyst sees and can act on.\nPartner with the engineering leads of each pillar (data platform, analyst experience, detection engines) as a peer thought partner, not a top-down authority, influencing through technical credibility and clear reasoning, not mandate.\nIdentify and prioritize the highest-leverage architectural investments across the system, and make the case for them to engineering leadership and product.\nGet hands-on where it matters: prototype, review, and occasionally build the connective tissue between pillars when no single team naturally owns it.\nEstablish and champion cross-cutting technical standards, for APIs, data contracts, and service boundaries, that keep independently-developed pillars interoperable as they evolve.\nMentor senior and staff engineers across teams, raising the bar for architectural thinking org-wide, not just within one team.\nRepresent the technical health of the overall system in planning and leadership conversations, translating \"what's exceptional, what's a gap, what's redundant\" into a roadmap.\nWhat Skills and Knowledge Will You Bring?\nIdeal candidates will have:\nDeep experience (15 or more years) building and operating large-scale distributed backend systems, with direct experience in at least two of: high-throughput data ingest/storage, query engines, or detection/rules systems.\nA demonstrated track record of reasoning about systems at the architecture level, not just implementing a spec, but identifying where a system's boundaries are wrong, where responsibilities overlap, and where they leave gaps.\nExperience designing APIs and service contracts that need to hold up across teams and years, not just within one codebase.\nComfort operating without a single clear chain of command, influencing peer teams and senior engineers through the strength of your reasoning.\nA four-year degree in Computer Science or equivalent practical experience.\nFamiliarity with security operations concepts (alerts, findings, assets, incidents, detection rules) is preferred; if you don't have direct SIEM/XDR background, you should be someone who can get fluent in a new domain fast.\nExperience with modern cloud infrastructure and data-intensive systems (distributed storage, high-cardinality querying, streaming pipelines) is preferred; specific tools matter less than demonstrated judgment about tradeoffs at scale.\nExposure to both rule-based and ML/AI-driven detection approaches is a plus, but the more important trait is being able to reason about when each is the right tool.\nWhy SentinelOne?\nAI is redefining how the world operates and rewriting the rules of security in real time, and SentinelOne was built for this moment. From day one, we architected an AI-native platform designed to operate at machine speed, not as an add-on to legacy systems but as the foundation itself. If you want to build where innovation and impact move together, this is that place.\nWe invest in our Sentinels with comprehensive, competitive benefits designed to support you and your family:\nEquity & Rewards\nRestricted Stock Units (RSUs)\nEmployee Stock Purchase Plan (ESPP)\nTime Off & Wellbeing\nFlexible time off\nPaid company holidays and paid sick time\nGender-neutral parental leave\nGrandparent leave\nInsurance & Financial Security\nMedical, dental, and vision coverage\n401(k) retirement plan with company match\nLife and disability insurance\nHealth and dependent care FSA\nVoluntary benefits (hospital, accident, critical illness)\nEmployee Assistance Program (EAP)\nARAG pre-paid legal\nNationwide pet insurance\nCancer Care program\nGlobal business travel medical insurance\nWork Perks & Flexibility\nHome office allowance\nMobile phone reimbursement\nWellness & Lifestyle\nWellness coach\nWellness/gym reimbursement\nFertility coverage\nAdoption & surrogacy reimbursement\nThis U.S. role has a base pay range that will vary based on the location of the candidate. For some locations, a different pay range may apply. If so, this range will be provided to you during the recruiting process. You can also reach out to the recruiter with any questions.\nBase Salary Range\n$216,000—$297,000 USD\nSentinelOne is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.\nSentinelOne participates in the E-Verify Program for all U.S. based roles.","description_format":"text","description_chars":7817,"description_truncated":false,"requirements":{"experience_years_min":15,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Equity","Flexible time off","Health insurance","Home office","Parental leave","Restricted stock units","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","Cloud Security","Endpoint Security","Cybersecurity AI"],"lifecycle":[{"event":"open","at":"2026-08-30T22:58:42Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 7 · green card filings: 6","filings_12m":7,"filings_prev_12m":12,"green_card_filings_12m":6,"median_offered_wage_usd":193269,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":4}],"liveness":{"score":19,"band":"cold","label":"Long shot","p_open":1,"p_active":0.529,"p_room":0.36,"age_days":80,"expected_fill_days":48,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":297000,"is_top_pay":true},"html_url":"https://alion.io/job/sentinelone-principal-software-engineer-ai-siem","json_url":"https://alion.io/job/sentinelone-principal-software-engineer-ai-siem.json","meta":{"generated_at":"2026-10-18T09:06:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13607,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":46},"rest":"https://alion.io/mcp/rest/get_company?id=46"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsentinelone-principal-software-engineer-ai-siem"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsentinelone-principal-software-engineer-ai-siem"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsentinelone-principal-software-engineer-ai-siem"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sentinelone-principal-software-engineer-ai-siem\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsentinelone-principal-software-engineer-ai-siem"}]}