Principal Detection Architect, SentinelOne
$208-275k
+ Employee stock purchase program
Autonomous cybersecurity platform
Open for applications
Autonomous cybersecurity platform
1001+ employees
Open for applications
$208-275k
+ Employee stock purchase program
1001+ employees
Company mission
To defeat every attack, every second, of every day.
Role
Who you are
- 12+ years of professional cybersecurity experience required
- Requires progressive experience in leading Detection Engineering within an industry-leading cyber product organization or managed security services provider
- Proven experience in threat detection engineering at scale and in a production environment, delivering production detections to a large number of customers
- Deep understanding of adversary behavior, including MITRE ATT&CK tactics and real-world threat techniques
- Expertise in heavily automated detection systems and applications of machine learning to detection across domains (e.g., EDR, cloud, third-party logs, identity signals)
- Familiarity with detection-as-code and detection release practices
- Knowledge of Windows, macOS, and Linux internals and low level development experience on at least one OS
- Strong communications and mentoring skills, including proven abilities to interact with customers and executives
- Proficiency in Python or another language
- Experience with Jenkins or other CI/CD systems for test and release automation
- Expertise in working with modern data architectures and security telemetry pipelines for analytics at scale
- Ability to rapidly prototype novel solutions to challenging detection problems
What the job involves
- We’re looking for a Detection Architect to drive the evolution of our detection engineering capabilities across the SentinelOne platform
- In this highly technical and influential IC role, you’ll define detection strategies that scale across diverse threat surfaces — from endpoints to cloud
- You’ll work at the intersection of threat research, AI, engineering, and product, setting the vision for how we detect and disrupt adversaries at machine speed
- This is a unique opportunity to shape the detection at one of the most advanced cybersecurity companies in the world
- Define detection coverage strategy and drive operations for threat detection across cloud, endpoint, identity, and AI-SIEM detection engines
- Lead the design of scalable, performant detection logic and detection engines across SentinelOne’s product lines
- Partner with threat researchers, reverse engineers, security data scientists, threat hunters, and incident responders to scale discovery of adversary tradecraft
- Evaluate and improve the quality, precision, and reliability of detection signals in production
- Mentor and guide detection engineers and researchers across the entire SentinelOne Detection organization
Our take
Cybercriminals are now leveraging the power of automation to make the current threat landscape too advanced for a lot of legacy antivirus software. SentinelOne is a cybersecurity company that matches this automation, with machine learning-focused software that is built to help businesses battle online attacks.
The company expanded the scope of its business from the endpoint security market to three markets valued at a combined $30 billion, including the corporate endpoint security and IT operations management markets. This gives SentinelOne a bigger potential customer base, although also puts them in direct competition with more focused cybersecurity companies, in addition to its biggest competitor, CrowdStrike.
When the company went public, it made financial headlines as the highest-valued cybersecurity IPO ever, which gave SentinelOne a market cap of $10B, though it's now fallen to around $4B. It has subsequently launched S Ventures, a $100M fund, through which SentinelOne invests in cybersecurity startups and has expanded its partnership with major tax firm KPMG to accelerate cyber investigations and responses to threats.
Steph
Company Specialist at Welcome to the Jungle
Insights
61% employee growth in 12 months
Company
Funding (last 2 of 9 rounds)
Feb 2021
$100m
LATE VC
Nov 2020
$267m
LATE VC
Total funding: $798.4m
Company benefits
- Incentive-based Wellness Challenges
- Medical, Dental & Vision
- Gym Reimbursement
- Career Wellness Perks
- Mental Health & Mindfulness
- Paid Parental Leave
- 401k
- Flexible Spending Accounts
- Short & Long Term Disability Insurance
- Employee Assistance Program
- Life Insurance
- Unlimited Time Off
- Paid Sick Time
- Paid Holidays
- Happy Hours
- Parties & Celebrations
- Team Building Activities
- All-Hands & Town Hall Gatherings
Company HQ
Old Mountain View, Mountain View, CA
Leadership
Tomer Weingarten
(CEO)They started their career in Software Development at Mckit Systems prior to co-founding dPolls and Carambola Media. They left their position as VP of Products at Toluna in December 2012 to found SentinelOne in January 2013, where they serve as CEO.
Share this job
View 59 more jobs at SentinelOne