Senior Cybersecurity – Endpoint Security (SentinelOne) and Infrastructure Security

Praxy; Hyderabad; On-site; INR 3,000,000 - 5,000,000; Full time

Job summary

AT&T is seeking a Senior Cybersecurity professional to architect and lead endpoint security and infrastructure protection initiatives. You will deploy and tune SentinelOne, Proofpoint, Guardicore, VPN and DLP across Linux, Windows and Mac environments, while coordinating with SOC/IR teams to detect threats and respond to incidents.

You will drive technical leadership, documentation and training for cross-functional teams, ensuring scalable security across on-prem and cloud environments.

Qualifications

• 10+ years in cybersecurity with 4–6 years on large endpoint/infrastructure protection platforms.
• Experience deploying SentinelOne, Proofpoint, Guardicore, VPN and DLP across Windows, Linux and Mac environments.
• Strong scripting, API integration and automation capabilities.

Responsibilities

• Architect and lead deployments of SentinelOne, Proofpoint, Guardicore, VPN and DLP across multi-OS endpoints and servers.
• Collaborate with SOC/IR to tune detections and respond to incidents.
• Develop runbooks, diagrams and best-practices for endpoint security and infra protection.

Skills

Endpoint security

Security architecture

Automation scripting

CI/CD

Threat detection

Incident response

Linux administration

Windows/macOS

Education

Bachelor's degree in IS/CS or related field

Tools

SentinelOne

Proofpoint

Guardicore

VPN

DLP

Kubernetes

VMware / Citrix

Azure Virtual Desktop

Job description

Role – Senior Cybersecurity – Endpoint Security and Infrastructure Security (SentinelOne, Proofpoint, Guardicore, VPN and DLP security solutions)

About the Company:

Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future-you’ll create it

About the Role:

Our team is seeking an experienced technologist to join our Cybersecurity team.

The Individual in this role will

• Architect and Lead SentinelOne Deployments: Design and implement SentinelOne, Proofpoint, Guardicore, VPN and DLP security solutions for a wide range of infrastructure and endpoints, ensuring scalable, resilient, and effective protection across:
• Multiple Linux distributions (RHEL, Ubuntu, CentOS, etc.)
• Windows Server (various versions)
• Windows and MacOS endpoints
• Virtual desktop infrastructure (HVDs)
• Kubernetes clusters running on-prem and in cloud environments
• Integration & Automation: Integrate with other security solutions and automation using APIs.
• Security Policy Management: Define, optimize, and enforce SentinelOne, Proofpoint, Guardicore, VPN and DLP security policies for different operating systems and device types, balancing security posture with operational requirements.
• Threat Detection & Incident Response: Collaborate with SOC and IR teams to tune SentinelOne, Proofpoint, Guardicore, VPN and DLP detections. Assist in the response to threats and the investigation of security incidents across the environment.
• Cross-Platform Expertise: Provide deep technical expertise in handling endpoint security for heterogeneous systems, troubleshooting compatibility issues, and optimizing performance.
• Technical Leadership & Documentation: Serve as the subject matter expert for endpoint security, producing architectural diagrams, technical documentation, runbooks, and best practices guides.
• Collaboration & Training: Partner with IT, DevOps, and security teams to ensure seamless integration with existing infrastructure and provide training on SentinelOne, Proofpoint, Guardicore, VPN and DLP usage and endpoint security hygiene.
• Continuous Improvement: Stay updated on emerging threats, SentinelOne, Proofpoint, Guardicore, VPN and DLP product updates, and industry best practices. Recommend enhancements to improve detection and response capabilities.

Required Skills:

• Minimum 10+ years in cybersecurity roles, with at least 4-6 years architecting and supporting large-scale endpoint and infrastructure protection platforms (preferably SentinelOne, Proofpoint, Guardicore, VPN and DLP).
• Operating system and Infrastructure Proficiency:
• Experience with Linux (multiple distros), MacOS and Windows server/client administration
• Knowledge of Virtual desktop infrastructure (VMware, Citrix, Azure Virtual Desktop)
• Knowledge of Kubernetes and application deployment.
• Security Frameworks: Familiarity with NIST, CIS, MITRE ATT&CK, and other security standards.
• Automation and coding: PowerShell, Bash, Python; CI/CD (GitHub/GitLab/Azure DevOps); API integration skills.
• Experience with the Singularity platform (EPP/EDR/XDR) is preferred.
• Familiarity with OT/IoT discovery and segmentation; network isolation strategies for branch and edge.
• Certified in Engineering and Administration areas of SentinelOne, Proofpoint, Guardicore, VPN and DLP, is highly desirable.
• The candidate must have excellent analytical and problem-solving skills, be self-motivated and work independently.
• Sense of urgency and attention to detail.
• Should be flexible to work on weekends.
• Should be flexible to provide coverage in US morning hours.

Desired Skills:

• Familiarity with applying Artificial Intelligence (AI) or Machine Learning (ML) techniques in cybersecurity contexts (e.g., anomaly detection, threat hunting, behavioral analytics, or risk scoring).
• Experience leveraging AI-enabled tools (such as Copilot for Security, Darktrace, CrowdStrike Charlotte AI, or custom LLM integrations) to enhance detection, response, and automation workflows.
• Understanding of LLM safety, prompt engineering, or AI governance frameworks (e.g., NIST AI RMF, EU AI Act readiness) is a plus.
• Exposure to data science fundamentals relevant to security (pattern recognition, supervised vs. unsupervised learning, model validation).
• Awareness of AI-driven risks (e.g., adversarial ML, data poisoning, model hallucination) and their mitigation within enterprise environments.
• Interest in leveraging GenAI for security operations, such as summarizing alerts, drafting reports, or automating incident triage.
• CISSP, CISM, SANS GIAC or relevant cybersecurity
• Excellent communication skills including metrics/performance documentation/presentation, technical drawing/architecture origination and modification
• Operates well under pressure and urgent circumstances
• Self-reliant and diligent in follow-through for assigned tasks
• Ability to work with a geographically disperse team
• Engaged collaborator, contributor and team player
• Experience working in an environment where coordination with multiple teams is essential to success
• Ability to prioritize individual/group work in a high-stress and time-bound environment
• Bachelor's / Master's degree in Information Systems, Engineering, Mathematics, Computer Science or Cyber Security or equivalent experience.

Additional Information:

Weekly Hours:

40

Time Type:

Regular

Location:

AT&T and its subsidiaries are committed to equal employment opportunity. All hiring, promotion, and other employment decisions remain merit-based and free from discrimination on the basis of race, color, religion, religious creed, national origin, ancestry, age, sex, sexual orientation, gender, gender identity, gender expression, physical disability, mental disability, pregnancy, medical condition, genetic information, marital status, citizenship status, military status, veteran status or any other characteristic protected by federal, state, or local laws. In addition, AT&T will provide reasonable accommodations to qualified individuals with disabilities. AT&T is a fair chance employer and does not initiate a background check until an offer is made.

Additional information (AI 1-6 list):

• Familiarity with applying Artificial Intelligence (AI) or Machine Learning (ML) techniques in cybersecurity contexts (e.g., anomaly detection, threat hunting, behavioral analytics, or risk scoring).
• Experience leveraging AI-enabled tools (such as Copilot for Security, Darktrace, CrowdStrike Charlotte AI, or custom LLM integrations) to enhance detection, response, and automation workflows.
• Understanding of LLM safety, prompt engineering, or AI governance frameworks (e.g., NIST AI RMF, EU AI Act readiness) is a plus.
• Exposure to data science fundamentals relevant to security (pattern recognition, supervised vs. unsupervised learning, model validation).
• Awareness of AI-driven risks (e.g., adversarial ML, data poisoning, model hallucination) and their mitigation within enterprise environments.
• Interest in leveraging GenAI for security operations, such as summarizing alerts, drafting reports, or automating incident triage.