Description
Make a difference here. UltraViolet Cyber is a leading platform-enabled unified security operations company providing a comprehensive suite of security operations solutions. Founded and operated by security practitioners with decades of experience, the UltraViolet Cyber security-as-code platform combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations by eliminating risks of separate red and blue teams.
The Senior Security EDR Engineer will be getting to lead a Fortune 250 company through a transformative security and technology project, leading a global team developing methodology for EDR optimization and best practices, and have the opportunity to learn cutting edge technology.
Responsibilities:
- Evaluate the current SentinelOne deployment and detection content, then identify gaps, risks, and improvement opportunities.
- Migrate and optimize data sources and detection content.
- Integrate SentinelOne with other security tools to strengthen the overall monitoring ecosystem.
- Design and maintain SentinelOne data models that support security use cases and compliance reporting.
- Develop, tune, and optimize detection rules and alerts in SentinelOne to reduce false positives and improve detection quality.
- Partner with SentinelOne Wayfinder MDR and the customer’s SOC on alert flow, triage, investigation, and response.
- Manage and optimize the SentinelOne endpoint deployment and prepare architecture and processes for growth in a hybrid environment with global data centers.
- Improve SOC processes, playbooks, and reporting beyond pure detection content.
- Lead knowledge transfer and upskilling so the customer’s team can sustain and operate the environment.
- Provide technical expertise during security incidents and help coordinate response activities.
Requirements:
- 8+ years of security engineering experience, with significant hands-on SentinelOne Singularity (and preferably SentinelOne AI SIEM) work.
- CISSP certification (or equivalent experience).
- SentinelOne certification(s) and/or SentinelOne University experience.
- Experience administering and optimizing SentinelOne in enterprise environments.
- Experience working with SentinelOne Wayfinder/Vigilance MDR alongside an internal SOC.
- Strong detection engineering and alert-tuning skills.
- Ability to lead, mentor, and upskill a team through documentation and knowledge transfer.
- Strong incident response and troubleshooting skills.
- Experience with Zero Trust architecture and endpoint security modernization.
- Experience with enterprise endpoint management platforms.
- Experience integrating SentinelOne with other security tools.
Work Environment:
- Must be authorized to work in the US.
- On-site in San Jose, CA up to 4 days per week.
- Occasional on-call support for security incidents as needed.
- Collaboration with cross-functional security teams.
- Minimum 3-month commitment (with potential for extension).