SentinelOne EDR Engineer

Job description

**Make a difference here.** UltraViolet Cyber is a leading platform-enabled unified security operations company providing a comprehensive suite of security operations solutions. Founded and operated by security practitioners with decades of experience, the UltraViolet Cyber security-as-code platform combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations by eliminating risks of separate red and blue teams. By creating continuously optimized identification, detection, and resilience from today’s dynamic threat landscape, UltraViolet Cyber provides both managed and custom-tailored unified security operations solutions to the Fortune 500, Federal Government, and Commercial clients. UltraViolet Cyber is headquartered in McLean, Virginia, with global offices across the U.S. and in India. Our Dedicated Defense model is curated for our customers looking to implement and/or optimize their SIEM and EDR solutions. This opportunity is aligned within UltraViolet Cyber to optimize the SentinelOne EDR functionality for our customers. The Senior Security EDR Engineer will be getting to lead a Fortune 250 company through a transformative security and technology project, leading a global team developing methodology for EDR optimization and best practices, and have the opportunity to learn cutting edge technology. ### What You'll Do: - Evaluate the current SentinelOne deployment and detection content, then identify gaps, risks, and improvement opportunities. - Migrate and optimize data sources and detection content. - Integrate SentinelOne with other security tools to strengthen the overall monitoring ecosystem. - Design and maintain SentinelOne data models that support security use cases and compliance reporting. - Develop, tune, and optimize detection rules and alerts in SentinelOne to reduce false positives and improve detection quality. - Partner with SentinelOne Wayfinder MDR and the customer’s SOC on alert flow, triage, investigation, and response. - Manage and optimize the SentinelOne endpoint deployment and prepare architecture and processes for growth in a hybrid environment with global data centers. - Improve SOC processes, playbooks, and reporting beyond pure detection content. - Lead knowledge transfer and upskilling so the customer’s team can sustain and operate the environment. - Provide technical expertise during security incidents and help coordinate response activities. ### What You've Done: - 8+ years of security engineering experience, with significant hands-on SentinelOne Singularity (and preferably SentinelOne AI SIEM) work. - CISSP certification (or equivalent experience). - SentinelOne certification(s) and/or SentinelOne University experience. - Experience administering and optimizing SentinelOne in enterprise environments. - Experience working with SentinelOne Wayfinder/Vigilance MDR alongside an internal SOC. - Strong detection engineering and alert-tuning skills. - Ability to lead, mentor, and upskill a team through documentation and knowledge transfer. - Strong incident response and troubleshooting skills. - Experience with Zero Trust architecture and endpoint security modernization. - Experience with enterprise endpoint management platforms. - Experience integrating SentinelOne with other security tools. ### Work Environment: - Must be authorized to work in the US. - On-site in San Jose, CA up to 4 days per week. - Occasional on-call support for security incidents as needed. - Collaboration with cross-functional security teams. - Minimum 3-month commitment (with potential for extension).