Manager of Detection Engineering, SentinelOne
Rapid Response Team
$164-226k
+ RSUs
AI-powered enterprise cybersecurity platform
Be an early applicant
AI-powered enterprise cybersecurity platform
1001+ employees
Be an early applicant
$164-226k
+ RSUs
1001+ employees
Company mission
To give the advantage to those who secure our future.
Role
Who you are
- Proven experience leading or mentoring a detection engineering, threat detection, or SOC-adjacent team. Direct people management is ideal, but a strong technical lead ready to step fully into management will also be considered; this is a people leadership role for someone who wants to grow as a leader and is also deeply technical
- Current, hands-on detection engineering expertise: you can personally write, review, and tune detection rules today, not just oversee others, with a firm grasp of the end-to-end detection lifecycle and false negative and false positive feedback loops
- Strong, hands-on experience with GitHub and detection-as-code pipelines, including fluency in pull requests, code review, and merge-to-release workflows
- Hands-on experience developing detections across more than one engine (endpoint behavioral, signature-based such as YARA, and cloud or SIEM-based across multiple data sources), or the ability to ramp quickly across engines
- Experience developing detections at a product or vendor company, where coverage must span many customers and industries rather than a single organization
- Strong understanding of adversary behavior, MITRE ATT&CK, and real-world threats such as ransomware and in-the-wild campaigns
- A track record in fast-moving, SLO-driven environments with competing priorities, and the flexibility to lead emerging threat responses whenever they break, including outside a traditional schedule rather than waiting for the next business day
- Excellent communication and stakeholder management skills, able to represent a technical team to senior leadership and partner teams
- Experience establishing or maturing team processes, metrics, and documentation that leadership can rely on
- Familiarity with intake and triage workflows and detection automation tooling is a strong plus
What the job involves
- As a Manager, Detection Engineering, you will be tasked with leading our Rapid Response Team (RRT), responsible for fast, reliable detection coverage across emerging and actively exploited threats, critical vulnerabilities, supply chain attacks, and detection gaps surfaced through every avenue, from customer escalations to internal research and threat intelligence
- This is a hands-on, technical leadership role where you will lead from the front, personally contributing to detection engineering work and setting the technical bar through your own rule development and code review, while owning the health, throughput, and direction of a specialized detection engineering team and protecting its focus in a fast-moving, reactive environment
- You will partner closely with cross-functional teams and detection leadership to ensure RRT delivers consistent, timely detection coverage
- Stay hands-on: personally develop, review, and drive detections to merge and release, especially during surges and for the hardest threats, setting the technical standard the team is measured against
- Lead, coach, and grow a team of five or more Senior to Staff detection engineers, owning hiring, development, performance, and day-to-day operations
- Own RRT's operational cadence: threat triage and prioritization, SLO adherence, incident coordination, and workload balancing across concurrent threats
- Protect the team's focus and capacity, shielding engineers from unscoped demand while ensuring high-priority work is met within target turnaround times
- Grow the cross-functional partnerships that extend RRT's reach, representing the team in shared forums that drive accountability, surface emerging threats, and communicate impact to leadership
- Own and evolve the team's roadmap, process documentation, service charter, and metrics, keeping the operation mature, measurable, and defensible
- Champion the detection automation and tooling that multiplies engineer output, aligning the automation roadmap with the team's needs
- Drive proactive, transparent communication of RRT's work, coverage, and outcomes to stakeholders, partner teams, and detection leadership
Our take
Cybercriminals are now leveraging the power of automation to make the current threat landscape too advanced for a lot of traditional antivirus software. SentinelOne is a cybersecurity company that matches this automation with machine learning-focused software designed to help businesses defend against online attacks.
The company has expanded beyond endpoint security into a broader AI-powered cybersecurity platform spanning endpoint, cloud, identity, and IT operations. This gives SentinelOne access to a larger enterprise market, although it also it also places the company in direct competitions with established cybersecurity leaders, including its biggest rival, CrowdStrike.
As cyberattacks become increasingly automated, the company is expanding its capabilities beyond detection to include AI-driven threat response, helping security teams contain attacks more quickly. While it still trails larger rival CrowdStrike in scale, SentinelOne is investing in platform expansion and automation to compete for enterprises looking to consolidate their cybersecurity into a single solution.
Steph
Company Specialist at Welcome to the Jungle
Insights
61% employee growth in 12 months
Company
Funding (last 2 of 9 rounds)
Feb 2021
$100m
LATE VC
Nov 2020
$267m
LATE VC
Total funding: $800.1m
Company benefits
- Medical, dental, and vision coverage
- Employee assistance program
- Gym reimbursement
- Incentive-based challenges
- Mental health and mindfulness
- Unlimited Time Off
- Grandparent Leave
- Volunteer Time Off
- Paid Sick Time
- Paid Holidays
- 16 weeks Gender-Neutral Parental Leave
- Restricted Stock Unit Program
- Flexible Spending Accounts
- Life Insurance
- Short and Long Term Disability Insurance
- Team building activities
- Celebrations and social gatherings
- Community volunteering events
- Global all hands and local town hall events
- 401K
Company HQ
Old Mountain View, Mountain View, CA
Leadership
Tomer Weingarten
(Co-Founder & CEO)Tomer began their career in Software Development at Mckit Systems prior to co-founding dPolls and Carambola Media. They left their position as VP of Products at Toluna in December 2012 to found SentinelOne in January 2013, where they have served as the CEO since.
Sonalee Parekh
(CFO)Prior to joining SentinelOne in 2026, Sonalee was the CFO at Asana and RingCentral. They also held senior roles at Hewlett Packard Enterprise, Jefferies, RBC Capital, Markets, Barclays Capital and Goldman Sachs.
Barry Padgett
(COO & President)Barry joined SentinelOne in 2025 as CGO before briefly serving as the CFO then moving into their current role as COO. Previously they spent 4 years at Amperity as COO and CEO and 1 year at Stripe as CRO.
Share this job
View 47 more jobs at SentinelOne