Detection Engineering Lead

SentinelOne, Inc.; United States; Remote; USD 164,000 - 226,000; Full time

Benefits offered by this job

RSUs

ESPP

Flexible time off

Paid holidays

Parental leave

Medical coverage

Dental coverage

Vision coverage

401(k) matching

Life and disability insurance

Wellness benefits

Home office allowance

Mobile reimbursement

Job summary

SentinelOne, Inc. is seeking a Manager of Detection Engineering to lead a fast-moving, software-driven team responsible for threat detection across endpoints and cloud environments.

You will personally contribute to detection work while guiding a multi-engine strategy, setting standards, and maturing processes, metrics, and collaboration with cross-functional partners. This role emphasizes leadership and technical excellence in a dynamic security landscape.

Qualifications

• Proven experience leading or mentoring a detection engineering, threat detection, or SOC-adjacent team.
• Hands-on detection engineering: write, review, and tune detection rules today.
• Strong experience with GitHub and detection-as-code pipelines, including PRs, code review, and merge-to-release workflows.
• Hands-on experience developing detections across more than one engine (endpoint behavioral, signature-based such as YARA, and cloud or SIEM-based).
• Experience developing detections at a product or vendor company.
• Strong understanding of adversary behavior, MITRE ATT&CK, and real-world threats like ransomware.
• Track record in fast-moving, SLO-driven environments with competing priorities.
• Excellent communication and stakeholder management skills.
• Experience establishing team processes, metrics, and documentation for leadership.
• Familiarity with intake and triage workflows and detection automation tooling.

Responsibilities

• Stay hands-on: develop, review, and drive detections to merge and release, especially during surges and for hard threats.
• Lead, coach, and grow a team of five or more Senior to Staff detection engineers, owning hiring and development.
• Own RRT’s operational cadence: threat triage, SLO adherence, incident coordination, workload balancing.
• Protect the team’s focus and capacity while ensuring high-priority work meets turnaround times.
• Grow cross-functional partnerships to drive accountability and surface emerging threats.
• Own and evolve the team’s roadmap, process docs, service charter, and metrics.
• Champion the detection automation and tooling to multiply engineer output.

Skills

People leadership

Detection engineering

GitHub pipelines

Threat detection

Tools

YARA

SIEM

GitHub

Job description

SentinelOne, Inc. is seeking a Manager of Detection Engineering to lead a fast-moving, software-driven team responsible for threat detection across endpoints and cloud environments.

You will personally contribute to detection work while guiding a multi-engine strategy, setting standards, and maturing processes, metrics, and collaboration with cross-functional partners. This role emphasizes leadership and technical excellence in a dynamic security landscape.