SentinelOne Engineer

True Zero Technologies, LLC

. Own the day-to-day administration of SentinelOne across managed environments, including agent deployment, policy management, and fleet health .

Posted 11/4/2026full-timeRemote • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in SentinelOne administration, including agent deployment, policy management, and threat detection. Proficient in integrating security tools and ensuring compliance with regulatory frameworks such as NIST SP 800-53 and Zero Trust principles.

Highest-signal resume keywords

SentinelOne Certified EngineerEndpoint Security AdministrationSIEM Operations and OptimizationThreat Hunting WorkflowsNIST SP 800-53 Familiarity

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Agent DeploymentPolicy ManagementLog ManagementCorrelation RulesAlert TuningDetection PoliciesDeep Visibility QueriesThreat HuntingRoot-Cause AnalysisPolicy Version Control

Soft Skills

Excellent Written CommunicationExcellent Verbal CommunicationCoaching and Mentoring

Tools & Technologies

SentinelOneSIEMSOARTicketing SystemsEDRXDRSplunkCrowdStrike

Certifications & Qualifications

SentinelOne Certified EngineerSecurity+CySA+GCIH

Industry Keywords

CybersecurityDetection EngineeringSOC OperationsZero Trust ArchitectureSecurity Compliance FrameworksState Government CustomersSLED

Tech Stack

Tools & technologies

Cyber SecuritySplunk

About the role

Key responsibilities & impact

Own the day-to-day administration of SentinelOne across managed environments, including agent deployment, policy management, and fleet health
Operate and continuously optimize SentinelOne’s SIEM capabilities, including log ingestion, correlation rules, dashboards, and alerting
Design, tune, and validate detection policies and Deep Visibility/Storyline queries
Support triage, investigation, and remediation of SentinelOne-detected threats, including threat hunting and root-cause analysis
Integrate SentinelOne with SIEM, SOAR, ticketing, and other security tooling
Monitor agent health, policy coverage, and platform performance; identify and remediate gaps across the managed fleet
Manage SentinelOne upgrades, policy version control, and lifecycle changes with minimal operational disruption
Ensure SentinelOne operations align with regulatory and security requirements, including NIST SP 800-53, Zero Trust principles, and applicable state-specific requirements
Deliver technical reports on endpoint and SIEM health, detection posture, and tuning outcomes with actionable recommendations
Engage with clients and stakeholders throughout the engagement lifecycle, including state government customers where assigned
Coach and mentor junior engineers on SentinelOne operations and detection engineering best practices

Requirements

What you’ll need

Must be a SentinelOne Certified Engineer (current certification required)
Minimum of 3–5 years in endpoint security, detection engineering, or SOC operations, with substantial hands-on SentinelOne administration
Required experience with the ongoing operations and optimization of SentinelOne as a SIEM platform, including log management, correlation, and alert tuning
Hands-on experience with EDR/XDR administration, policy tuning, Deep Visibility/Storyline queries, and threat hunting workflows
Experience integrating EDR/SIEM platforms with SOAR, ticketing, and broader security tooling
Familiarity with NIST SP 800-53, Zero Trust architecture principles, and general security compliance frameworks
Excellent written and verbal skills to convey technical information to diverse audiences
Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field preferred; equivalent experience considered
Experience supporting state government (SLED) customers is a plus
Additional security certifications (e.g., Security+, CySA+, GCIH, or equivalent) are a plus
Experience with other EDR/SIEM platforms (e.g., Splunk, CrowdStrike) is a plus
Prior experience at a Veteran-Owned Small Business or similar government-focused contractor is a plus

Benefits

Comp & perks

A competitive salary, paid twice per month
Best-in-class medical coverage — 100% of medical premiums covered by True Zero
Companywide new business incentive programs
Contribution incentives (white papers, blog posts, internal webinars, etc.)
3 weeks of PTO to start, plus 11 paid holidays annually
401(k) with 100% company match on the first 4%
Monthly reimbursement of cell phone and home internet costs
Paternity / Maternity leave