Staff Software Engineer, Endpoint Escalations (C++, Windows/OS Internals)

SentinelOne; United States; On-site; USD 156,000 - 215,000; Full time

Benefits offered by this job

RSUs

ESPP

Flexible time off

Paid holidays

Paid sick time

Parental leave

Grandparent leave

Medical, dental, and vision

401(k) with company match

Life and disability insurance

Health and dependent care FSA

EAP

Pet insurance

Cancer Care program

Job summary

SentinelOne is seeking a Staff Software Engineer, Endpoint Escalations, to serve as the technical backbone for the most critical customer incidents involving the Windows EDR agent. You will diagnose complex failures at the code and OS-internals level, and represent engineering to customers during active incidents.

Join a team that collaborates across engineering, QA, support, and product to turn escalation learnings into permanent fixes and scalable runbooks, while mentoring others in Windows

Qualifications

• 8+ years of hands-on technical experience handling complex customer escalations.
• Deep knowledge of Windows internals: kernel/user-mode boundary, drivers, memory management.
• Excellent verbal and written communication with customers and leadership.
• Experience with security-oriented or endpoint protection software is a strong advantage.

Responsibilities

• Own and drive resolution of the most complex, escalated customer issues involving our Windows endpoint agent.
• Perform deep root-cause analysis across the Windows stack and our C++ codebase.
• Read, debug, and modify or patch code to resolve issues when needed.
• Act as the primary technical contact during high-severity incidents, communicating status and remediation plans.

Skills

C/C++

Windows internals

Customer communication

Root cause analysis

Tools

WinDbg

Kernel dumps

Job description

Our Purpose

At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them becomes more critical than ever. When you join SentinelOne, your work helps protect global enterprises, critical infrastructure, and the technologies shaping tomorrow. If you are motivated by meaningful challenges and want your impact to be real, measurable, and global, you will find purpose here.

About Us

SentinelOne is a company at the intersection of AI and security, pioneering a new operating model for cybersecurity. Our AI-native platform unifies protection across endpoint, cloud, identity, data, and AI systems to deliver autonomous detection and response with clarity and speed. By combining real‑time analytics, intelligent automation, and a unified data foundation, we reduce noise, simplify complexity, and empower security teams to focus on what truly matters.

Our teams are builders, problem‑solvers, and innovators committed to shaping the future of security. If you are excited to solve hard problems alongside talented, mission‑driven people, we invite you to help us build a safer future for humanity.

What Are We Looking For?

We’re looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes.

As a Staff Software Engineer, Endpoint Escalations, you will be tasked with serving as the technical backbone for our most critical customer incidents involving our Windows EDR agent. You will sit at the intersection of deep systems engineering and high‑stakes customer communication, diagnosing complex, real‑world failures at the code and OS‑internals level, and representing SentinelOne engineering directly to customers, including senior technical and executive stakeholders, during active incidents.

What Will You Do?

• Own and drive resolution of the most complex, escalated customer issues involving our Windows endpoint agent.


• Perform deep root‑cause analysis across the Windows stack and our own C++ codebase.


• Read, debug, and if needed, modify or patch code to resolve or work around issues.


• Act as the engineering primary technical point of contact during high‑severity incidents, communicating status, findings, and remediation plans with clarity and composure.


• Partner with engineering, QA, support, and product teams to translate escalation patterns into permanent fixes, and feed field learnings back into the product roadmap.


• Build and maintain tooling and runbooks that make future escalations faster to triage and resolve.


• Mentor support and engineering teams on Windows internals and debugging methodology to raise the bar on first‑line triage.

What Skills and Knowledge Will You Bring?

• 8 or more years of hands‑on technical experience handling complex customer escalations, with the ability to read and debug C/C++ code.


• Deep, hands‑on knowledge of Windows internals: kernel/user‑mode boundary, drivers, process/memory management, file system filters, networking stack, and Windows debugging tools (WinDbg, kernel/user dumps etc.).


• Excellent ability to debug and troubleshoot complex, ambiguous problems down to the code level.


• Excellent verbal and written communication skills and experience working directly with customers and senior leadership.


• Experience with security‑oriented or endpoint protection software (EDR/XDR, AV, or similar) is a strong advantage.


• Experience with Linux and MacOS operating systems is a strong advantage.


• Experience with Endpoint backend is an advantage.

Why SentinelOne?

AI is redefining how the world operates and rewriting the rules of security in real time, and SentinelOne was built for this moment. From day one, we architected an AI‑native platform designed to operate at machine speed, not as an add‑on to legacy systems but as the foundation itself. If you want to build where innovation and impact move together, this is that place.

We invest in our Sentinels with comprehensive, competitive benefits designed to support you and your family:

Equity & Rewards

• Restricted Stock Units (RSUs)


• Employee Stock Purchase Plan (ESPP)

Time Off & Wellbeing

• Flexible time off


• Paid company holidays and paid sick time


• Gender‑neutral parental leave


• Grandparent leave

Insurance & Financial Security

• Medical, dental, and vision coverage


• 401(k) retirement plan with company match


• Life and disability insurance


• Health and dependent care FSA


• Voluntary benefits (hospital, accident, critical illness)


• Employee Assistance Program (EAP)


• ARAG pre‑paid legal


• Nationwide pet insurance


• Cancer Care program


• Global business travel medical insurance

Work Perks & Flexibility

• Home office allowance


• Mobile phone reimbursement

Wellness & Lifestyle

• Wellness coach


• Wellness/gym reimbursement


• Fertility coverage

This U.S. role has a base pay range that will vary based on the location of the candidate. For some locations, a different pay range may apply. If so, this range will be provided to you during the recruiting process.

Base Salary Range: $156,000—$215,000 USD

SentinelOne is proud to be an Equal Employment Opportunity and affirmatively action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

SentinelOne participates in the E-Verify Program for all U.S. based roles.