Senior Security Operations Engineer

As a Senior Hyperautomation Engineer, you will be tasked with designing, building, and operating the automation layer that powers Wayfinder MDR. You will work closely with Threat Service Engineers (TSEs), SOC analysts, Threat Hunters, and R&D teams to transform manual SOC processes into scalable, reliable, and efficient automation workflows.

This role focuses on engineering and automation, not alert triage. You will help shape how MDR operates at scale by reducing manual workload, improving signal-to-noise ratio, and enabling faster and more consistent threat detection and response.

What Will You Do?

Primary responsibilities include:

• Design, develop, and maintain hyperautomation workflows that support alert triage, enrichment, investigation, and response.
• Convert SOC playbooks, investigation logic, and threat-hunting processes into automated, production-grade workflows.
• Proactively identify repetitive or high-volume SOC tasks and implement automation to improve efficiency and consistency.
• Build and maintain integrations with internal platforms and third-party security tools using APIs, webhooks, and event-driven mechanisms.
• Collaborate closely with Threat Service Engineers (TSEs) and SOC teams to fine-tune existing detections and automation logic.
• Improve and optimize MDR operational processes to ensure fast response times and effective threat mitigation.
• Own automation workflows end-to-end, including design, deployment, monitoring, troubleshooting, and continuous improvement.
• Create and maintain automation playbooks, templates, and best practices to support incident response at scale.
• Work closely with R&D and product teams to provide operational feedback and help shape future detection and response capabilities.

What Skills & Knowledge Will You Bring?

Ideal candidates will have:

• 5+ years of experience in Security Engineering, Automation Engineering, SOC Tooling, Backend Engineering, or similar technical roles.
• Strong experience with Python (required); experience with SQL is highly preferred.
• Experience building and operating automation workflows or backend services in production environments.
• Solid understanding of SOC operations, incident response workflows, and security alert lifecycles.
• Experience working with APIs, integrations, and distributed systems.
• Strong problem-solving skills with the ability to translate operational challenges into scalable engineering solutions.
• Professional and articulate, with strong written and verbal communication skills.
• Ability to manage multiple workstreams and prioritize effectively in a fast-paced environment.

Why SentinelOne?

AI is redefining how the world operates and rewriting the rules of security in real time, and SentinelOne was built for this moment. From day one, we architected an AI-native platform designed to operate at machine speed, not as an add-on to legacy systems but as the foundation itself. If you want to build where innovation and impact move together, this is that place.

We invest in our Sentinels with comprehensive, competitive benefits designed to support you and your family:

Equity & Rewards

• Restricted Stock Units (RSUs)
• Employee Stock Purchase Plan (ESPP)

Time Off & Wellbeing

• Flexible time off
• Paid company holidays and paid sick time
• Gender-neutral parental leave
• Grandparent leave

Insurance & Financial Security

• Medical, dental, and vision coverage
• 401(k) retirement plan with company match
• Life and disability insurance
• Health and dependent care FSA
• Voluntary benefits (hospital, accident, critical illness)
• Employee Assistance Program (EAP)
• ARAG pre-paid legal
• Nationwide pet insurance
• Cancer Care program
• Global business travel medical insurance

Work Perks & Flexibility

• Home office allowance
• Mobile phone reimbursement

Wellness & Lifestyle

• Wellness coach
• Wellness/gym reimbursement
• Fertility coverage
• Adoption & surrogacy reimbursement