SentinelOneRemote
Senior Security Operations Engineer
United States of America
Full Time
1 week ago
$108,000 - $140,000 USD
No H1B
Key skills
PythonSQLSecurity EngineeringAutomation EngineeringSOC ToolingBackend EngineeringAutomation workflowsIncident response workflowsSecurity alert lifecyclesAPIsDistributed systemsRAICommunication
About this role
SentinelOne is a company at the intersection of AI and security, pioneering a new operating model for cybersecurity. The Senior Security Operations Engineer will design, build, and operate automation workflows that enhance threat detection and response within the organization.
Responsibilities:
- Design, develop, and maintain hyperautomation workflows that support alert triage, enrichment, investigation, and response
- Convert SOC playbooks, investigation logic, and threat-hunting processes into automated, production-grade workflows
- Proactively identify repetitive or high-volume SOC tasks and implement automation to improve efficiency and consistency
- Build and maintain integrations with internal platforms and third-party security tools using APIs, webhooks, and event-driven mechanisms
- Collaborate closely with Threat Service Engineers (TSEs) and SOC teams to fine-tune existing detections and automation logic
- Improve and optimize MDR operational processes to ensure fast response times and effective threat mitigation
- Own automation workflows end-to-end, including design, deployment, monitoring, troubleshooting, and continuous improvement
- Create and maintain automation playbooks, templates, and best practices to support incident response at scale
- Work closely with R&D and product teams to provide operational feedback and help shape future detection and response capabilities
Requirements:
- 5+ years of experience in Security Engineering, Automation Engineering, SOC Tooling, Backend Engineering, or similar technical roles
- Strong experience with Python (required)
- Experience building and operating automation workflows or backend services in production environments
- Solid understanding of SOC operations, incident response workflows, and security alert lifecycles
- Experience working with APIs, integrations, and distributed systems
- Strong problem-solving skills with the ability to translate operational challenges into scalable engineering solutions
- Professional and articulate, with strong written and verbal communication skills
- Ability to manage multiple workstreams and prioritize effectively in a fast-paced environment
- Experience with SQL is highly preferred