{"id":3773242,"url":"https://alion.io/job/true-zero-technologies-sentinelone-engineer-r-00249","title":"SentinelOne Engineer (R-00249)","company":{"id":8178,"name":"True Zero Technologies","domain":"truezerotech.com","url":"https://alion.io/company/true-zero-technologies","size_band":"51-200","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"A","score":89,"open_postings":4,"ghost_share":0,"stale_share":0.25,"repost_share":0,"time_to_fill_p50_days":83,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false},{"name":"Crowdstrike","optional":true},{"name":"Splunk","optional":true}],"status":"live","first_seen_at":"2026-11-04T12:40:06Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-09T03:40:40Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"About True Zero Technologies\nTrue Zero Technologies is a veteran-owned small business founded on the principle that the purposeful enablement of people and technology directly drives the quality of an organization’s outcomes. We design and deliver cybersecurity programs and software solutions that empower federal, state and local government, education, and commercial leaders to run a proactive defense with better intelligence and more efficient collaboration. Recent recognitions include Inc. Magazine’s 2026 Best Workplaces list and awarded positions on Fairfax County VA Cybersecurity Program, Montana ITS Contract, Kansas Services MSA, DARPA’s MANNUS IDIQ, NASA SEWP VI, and the $151B SHIELD contract.\nOur endpoint and detection engineering practice helps organizations get full value out of the SentinelOne platform - governance first, integrated with Zero Trust architecture, and aligned to the NIST Risk Management Framework and NIST SP 800-53. We build secure, highly tuned detection and response capabilities that keep critical systems protected without overwhelming security teams with noise.\nPosition Overview\nTrue Zero is seeking a Certified SentinelOne Engineer to lead the ongoing operations, tuning, and optimization of SentinelOne across secure, mission-critical environments - including use of the platform as a SIEM for centralized log management, detection, and correlation. This is a senior technical role for an engineer who pairs deep, hands-on SentinelOne expertise with the judgment to guide teams, engage clients, and deliver production-grade, highly reliable endpoint and SIEM operations.\nThe ideal candidate holds current SentinelOne Certified Engineer status and brings a track record of running and continuously optimizing SentinelOne in production - tuning detection policies, managing the agent fleet, and operating SentinelOne’s SIEM capabilities for log ingestion, correlation, and alerting. Experience supporting state government customers is a strong plus, given True Zero’s growing work across SLED environments.\nKey Responsibilities\nPlatform Operations: Own the day-to-day administration of SentinelOne across managed environments, including agent deployment, policy management, and fleet health.\nSIEM Operations & Optimization: Operate and continuously optimize SentinelOne’s SIEM capabilities - log ingestion, correlation rules, dashboards, and alerting - to maximize detection coverage and minimize false positives.\nDetection Engineering & Tuning: Design, tune, and validate detection policies and Deep Visibility/Storyline queries to keep pace with evolving threats while reducing analyst noise.\nIncident Response Support: Support triage, investigation, and remediation of SentinelOne-detected threats, including threat hunting and root-cause analysis.\nSystems Integration: Integrate SentinelOne with SIEM, SOAR, ticketing, and other security tooling to ensure seamless data flow and unified workflows.\nPerformance & Health Monitoring: Monitor agent health, policy coverage, and platform performance; identify and remediate gaps across the managed fleet.\nUpgrades & Lifecycle Management: Manage SentinelOne upgrades, policy version control, and lifecycle changes with minimal operational disruption.\nGovernance & Compliance: Ensure SentinelOne operations align with regulatory and security requirements, including NIST SP 800-53 and Zero Trust principles, and state-specific requirements where applicable.\nReporting: Deliver technical reports on endpoint and SIEM health, detection posture, and tuning outcomes with clear, actionable recommendations.\nClient Collaboration: Engage with clients and stakeholders throughout the engagement lifecycle, including state government customers where assigned.\nTeam Development: Coach and mentor junior engineers on SentinelOne operations and detection engineering best practices.\nQualification & Requirements\n Certification: Must be a SentinelOne Certified Engineer (current certification required).\nExperience: Minimum of 3-5 years in endpoint security, detection engineering, or SOC operations, with substantial hands-on SentinelOne administration.\nSIEM Operations: Required: experience with the ongoing operations and optimization of SentinelOne as a SIEM platform, including log management, correlation, and alert tuning.\nTechnical Proficiency: Hands-on experience with EDR/XDR administration, policy tuning, Deep Visibility/Storyline queries, and threat hunting workflows.\nSystems Integration: Experience integrating EDR/SIEM platforms with SOAR, ticketing, and broader security tooling.\nGovernance: Familiarity with NIST SP 800-53, Zero Trust architecture principles, and general security compliance frameworks.\nCommunication: Excellent written and verbal skills to convey technical information to diverse audiences.\n Education: Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field preferred; equivalent experience considered.\nPreferred Experience\nExperience supporting state government (SLED) customers is a plus.\nAdditional security certifications (e.g., Security+, CySA+, GCIH, or equivalent) are a plus.\nExperience with other EDR/SIEM platforms (e.g., Splunk, CrowdStrike) is a plus.\nPrior experience at a Veteran-Owned Small Business or similar government-focused contractor is a plus.","description_format":"text","description_chars":5324,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Information Security","Security Operations","Managed Security"],"lifecycle":[{"event":"open","at":"2026-11-04T22:20:09Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":83,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/true-zero-technologies-sentinelone-engineer-r-00249","json_url":"https://alion.io/job/true-zero-technologies-sentinelone-engineer-r-00249.json","meta":{"generated_at":"2026-11-09T06:08:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1953,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8178},"rest":"https://alion.io/mcp/rest/get_company?id=8178"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftrue-zero-technologies-sentinelone-engineer-r-00249"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftrue-zero-technologies-sentinelone-engineer-r-00249"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftrue-zero-technologies-sentinelone-engineer-r-00249"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/true-zero-technologies-sentinelone-engineer-r-00249\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftrue-zero-technologies-sentinelone-engineer-r-00249"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3773242}},{"tool":"search_jobs","arguments":{"company":"truezerotech.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3773242},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}