Senior XDR & Automation Engineer — Hybrid in MA

CyberTrust Massachusetts; Massachusetts; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

On-site one day per week

Job summary

CyberTrust Massachusetts seeking an experienced Senior Security Engineer to join our Security Operations team. This hybrid role focuses on administering and expanding the SentinelOne EDR/XDR platform across a diverse multi-tenant client base, with hands-on expertise in Hyper-automation, API-driven workflows, and cross-platform visibility in a fast-paced MSSP setting.

The ideal candidate brings SentinelOne experience, API proficiency, and a strong background in automation, log parsing, and SIEM

Qualifications

• 5+ years of hands-on experience in security engineering, with recent SentinelOne platform experience.
• Demonstrated expertise with SentinelOne XDR, including third-party integrations, API configuration, and multi-tenant management.
• Proven experience building and managing SentinelOne Hyper-automation playbooks in a production environment.
• Experience developing custom log parsers for security data normalization.
• Strong proficiency with REST API integration and Python for security automation.
• Experience with SIEM platforms and correlation rule development.
• Knowledge of MITRE ATT&CK framework and its application to detection engineering.
• Experience working in an MSSP or multi-tenant managed security environment.

Responsibilities

• SentinelOne Platform Administration for multi-tenant environments across clients.
• Manage configurations, policies, agent deployments, and platform health.
• Design, build, and maintain XDR integrations via API with third-party sources.
• Create and maintain Hyper-automation playbooks to automate responses.
• Develop and maintain custom log parsers and ensure accurate data ingestion.
• Create and maintain runbooks, guides, and operational procedures.

Skills

SentinelOne XDR

REST API

Python

SIEM

MITRE ATT&CK

Tools

SentinelOne

Job description

CyberTrust Massachusetts seeking an experienced Senior Security Engineer to join our Security Operations team. This hybrid role focuses on administering and expanding the SentinelOne EDR/XDR platform across a diverse multi-tenant client base, with hands-on expertise in Hyper-automation, API-driven workflows, and cross-platform visibility in a fast-paced MSSP setting.

The ideal candidate brings SentinelOne experience, API proficiency, and a strong background in automation, log parsing, and SIEM