🕒 6 days ago
Lead complex cybersecurity investigations and incident response while engineering detections, threat hunts, and automated workflows to strengthen security monitoring and response across a global environment.
SentinelOne Engineer (R-00249)
🕒 4 days ago
SentineloneSIEM OperationsEDR/XDR AdministrationDetection Engineering
📜 Description
- Administer SentinelOne, including agent deployment, policy management, and fleet health.
- Operate and optimize SIEM log ingestion, correlation rules, dashboards, and alerting.
- Design and tune detection policies and Deep Visibility/Storyline queries; support threat hunting and incident investigations.
- Integrate SentinelOne with SIEM, SOAR, ticketing, and other security tools.
- Monitor platform health, manage upgrades, and align operations with security and compliance requirements.
- Report on endpoint and SIEM health, collaborate with clients, and mentor junior engineers.
🛠️ Requirements
- Certification: Must be a SentinelOne Certified Engineer (current certification required).
- Experience: Minimum of 3–5 years in endpoint security, detection engineering, or SOC operations, with substantial hands-on SentinelOne administration.
- SIEM Operations: Required: experience with the ongoing operations and optimization of SentinelOne as a SIEM platform, including log management, correlation, and alert tuning.
- Technical Proficiency: Hands-on experience with EDR/XDR administration, policy tuning, Deep Visibility/Storyline queries, and threat hunting workflows.
- Systems Integration: Experience integrating EDR/SIEM platforms with SOAR, ticketing, and broader security tooling.
- Governance: Familiarity with NIST SP 800-53, Zero Trust architecture principles, and general security compliance frameworks.
- Communication: Excellent written and verbal skills to convey technical information to diverse audiences.
- Education: Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field preferred; equivalent experience considered.
- Experience supporting state government (SLED) customers is a plus.
- Additional security certifications (e.g., Security+, CySA+, GCIH, or equivalent) are a plus.
Full job description
About True Zero Technologies
True Zero Technologies is a veteran-owned small business founded on the principle that the purposeful enablement of people and technology directly drives the quality of an organization’s outcomes. We design and deliver cybersecurity programs and software solutions that empower federal, state and local government, education, and commercial leaders to run a proactive defense with better intelligence and more efficient collaboration. Recent recognitions include Inc. Magazine’s 2026 Best Workplaces list and awarded positions on Fairfax County VA Cybersecurity Program, Montana ITS Contract, Kansas Services MSA, DARPA’s MANNUS IDIQ, NASA SEWP VI, and the $151B SHIELD contract.
Our endpoint and detection engineering practice helps organizations get full value out of the SentinelOne platform — governance first, integrated with Zero Trust architecture, and aligned to the NIST Risk Management Framework and NIST SP 800-53. We build secure, highly tuned detection and response capabilities that keep critical systems protected without overwhelming security teams with noise.
Position Overview
True Zero is seeking a Certified SentinelOne Engineer to lead the ongoing operations, tuning, and optimization of SentinelOne across secure, mission-critical environments — including use of the platform as a SIEM for centralized log management, detection, and correlation. This is a senior technical role for an engineer who pairs deep, hands-on SentinelOne expertise with the judgment to guide teams, engage clients, and deliver production-grade, highly reliable endpoint and SIEM operations.
The ideal candidate holds current SentinelOne Certified Engineer status and brings a track record of running and continuously optimizing SentinelOne in production — tuning detection policies, managing the agent fleet, and operating SentinelOne’s SIEM capabilities for log ingestion, correlation, and alerting. Experience supporting state government customers is a strong plus, given True Zero’s growing work across SLED environments.Key Responsibilities
Qualification & Requirements
Preferred Experience
Similar jobs
Search more Cybersecurity Engineer jobs
Staff Security Engineer | Enterprise Security
🕒 2 days ago
ServiceNow👥 10,000+ employees🏢 Computer Software
🕒 2 days ago
Engineer and operate enterprise security controls across on-premises, cloud, and isolated environments, automating security operations and driving remediation and compliance with CIS and NIST baselines.
🕒 2 days ago
Own and optimize security tools, investigate threats, lead incident response, and strengthen preventative controls while mentoring analysts and advising stakeholders on practical security improvements.
🕒 2 days ago
O hub de inovação e tecnologia de um dos maiores e mais consolidados bancos do Brasil: o Banco Mercantil. Criado para atuar como um núcleo de desenvolvimento de soluções conectadas com o novo e com as demandas do futuro.
🕒 2 days ago
Lead and develop group-wide OT security, shaping governance and security architecture while advising senior leaders and coordinating stakeholders to strengthen the resilience of critical energy operations.
📍 🇸🇪 Solna - Remote💼 Full-Time🎸 Senior📏 Cybersecurity Engineer📢 🇬🇧 English Required📢 🇸🇪 Swedish Required