SentinelOne EDR Engineer
Confirmed on the employer's own hiring board on Oct 30, 2026. First seen by Alion on Oct 27, 2026. Uvcyber scores B on the Alion truth index.
Our Dedicated Defense model is curated for our customers looking to implement and/or optimize their SIEM and EDR solutions. This opportunity is aligned within UltraViolet Cyber to optimize the SentinelOne EDR functionality for our customers. The Senior Security EDR Engineer will be getting to lead a Fortune 250 company through a transformative security and technology project, leading a global team developing methodology for EDR optimization and best practices, and have the opportunity to learn cutting edge technology.
What You'll Do:
- Evaluate the current SentinelOne deployment and detection content, then identify gaps, risks, and improvement opportunities.
- Migrate and optimize data sources and detection content.
- Integrate SentinelOne with other security tools to strengthen the overall monitoring ecosystem.
- Design and maintain SentinelOne data models that support security use cases and compliance reporting.
- Develop, tune, and optimize detection rules and alerts in SentinelOne to reduce false positives and improve detection quality.
- Partner with SentinelOne Wayfinder MDR and the customer’s SOC on alert flow, triage, investigation, and response.
- Manage and optimize the SentinelOne endpoint deployment and prepare architecture and processes for growth in a hybrid environment with global data centers.
- Improve SOC processes, playbooks, and reporting beyond pure detection content.
- Lead knowledge transfer and upskilling so the customer’s team can sustain and operate the environment.
- Provide technical expertise during security incidents and help coordinate response activities.
What You've Done:
- 8+ years of security engineering experience, with significant hands-on SentinelOne Singularity (and preferably SentinelOne AI SIEM) work.
- CISSP certification (or equivalent experience).
- SentinelOne certification(s) and/or SentinelOne University experience.
- Experience administering and optimizing SentinelOne in enterprise environments.
- Experience working with SentinelOne Wayfinder/Vigilance MDR alongside an internal SOC.
- Strong detection engineering and alert-tuning skills.
- Ability to lead, mentor, and upskill a team through documentation and knowledge transfer.
- Strong incident response and troubleshooting skills.
- Experience with Zero Trust architecture and endpoint security modernization.
- Experience with enterprise endpoint management platforms.
- Experience integrating SentinelOne with other security tools.
Work Environment:
- Must be authorized to work in the US.
- On-site in San Jose, CA up to 4 days per week.
- Occasional on-call support for security incidents as needed.
- Collaboration with cross-functional security teams.
- Minimum 3-month commitment (with potential for extension).