Senior Manager, Detection Engineering

About Us:

SentinelOne is defining the future of cybersecurity through our XDR platform that automatically prevents, detects, and responds to threats in real-time. Singularity XDR ingests data and leverages our patented AI models to deliver autonomous protection. With SentinelOne, organizations gain full transparency into everything happening across the network at machine speed – to defeat every attack, at every stage of the threat lifecycle.

We are a values-driven team where names are known, results are rewarded, and friendships are formed. Trust, accountability, relentlessness, ingenuity, and OneSentinel define the pillars of our collaborative and unified global culture. We're looking for people that will drive team success and collaboration across SentinelOne. If you’re enthusiastic about innovative approaches to problem-solving, we would love to speak with you about joining our team!

What are we looking for?

We are looking for a senior manager who is passionate about detection and wants to make an impact in one of the fastest growing parts of our product line, the Singularity Data Lake. This person will lead the team delivering SentinelOne-provided default detection rules into that platform. We need someone who loves leading people on research and engineering projects which will make our XDRs detections accurate and effective.

What will you do?

As the Senior Manager of the XDR Rules Team, you will lead a group of talented individuals in developing and maintaining default rules that form the backbone of our XDR capabilities. Your role involves overseeing the end-to-end process of rule creation, correlation, testing, release, and optimization for cost. You will be responsible for ensuring the team's output aligns with the highest standards of detection efficacy, minimizing false positives, and delivering superior detection capabilities.

You will be responsible for the following:

• Build and then inspire a team of rule-writers, fostering a collaborative and innovative work environment who aren’t afraid to dig into the data.
• Provide guidance and mentorship to team members, ensuring professional growth and development.
• Oversee the creation, ownership, and packaging of default rules for the XDR platform.
• Plan and deliver predictable releases, defining a backlog of datasources and adversary techniques for research and development in collaboration with Detection Product Managers.
• Define and adhere to a set of detection engineering principles including peer review, unit tests, end to end tests, CI/CD integration, rule lifecycles, and telemetry monitoring.
• Deliver unique event correlation detection rules across diverse third-party sources and across entities and time-spans.
• Develop strategies to enhance the efficiency and effectiveness of correlation mechanisms.
• Research 3-rd party data sources to implement continuous improvement measures to minimize false positives and enhance rule efficacy.
• Stay informed about the latest industry trends, threat landscapes, and emerging technologies to continually improve detection solutions.
  
  

• Proven experience in managing teams focused on rule development for XDR or similar cybersecurity platforms.
• In-depth knowledge of threat detection mechanisms, rule creation, and correlation across third-party sources.
• Strong understanding of the cybersecurity landscape, threat intelligence, and emerging threats.
• Knowledge and ideally hands-on experience with Jenkins or another CI/CD system and detection rule testing automation.
• Excellent leadership, communication, and collaboration skills.
• Hands on experience with github, python, and other software engineering technologies often used in detection engineering,
• Experience with KQL, SPL, S1QL, PowerQuery, EQL, Sigma, or other common detection and hunting languages.