[Hiring] Manager, Detection Engineering @SentinelOne

Role Description

As a Manager, Detection Engineering, you will be tasked with leading our Rapid Response Team (RRT), responsible for fast, reliable detection coverage across emerging and actively exploited threats, critical vulnerabilities, supply chain attacks, and detection gaps surfaced through every avenue, from customer escalations to internal research and threat intelligence. This is a hands-on, technical leadership role where you will lead from the front, personally contributing to detection engineering work and setting the technical bar through your own rule development and code review, while owning the health, throughput, and direction of a specialized detection engineering team and protecting its focus in a fast-moving, reactive environment. You will partner closely with cross-functional teams and detection leadership to ensure RRT delivers consistent, timely detection coverage.

What Will You Do?

• Stay hands-on: personally develop, review, and drive detections to merge and release, especially during surges and for the hardest threats, setting the technical standard the team is measured against.
• Lead, coach, and grow a team of five or more Senior to Staff detection engineers, owning hiring, development, performance, and day-to-day operations.
• Own RRT's operational cadence: threat triage and prioritization, SLO adherence, incident coordination, and workload balancing across concurrent threats.
• Protect the team's focus and capacity, shielding engineers from unscoped demand while ensuring high-priority work is met within target turnaround times.
• Grow the cross-functional partnerships that extend RRT's reach, representing the team in shared forums that drive accountability, surface emerging threats, and communicate impact to leadership.
• Own and evolve the team's roadmap, process documentation, service charter, and metrics, keeping the operation mature, measurable, and defensible.
• Champion the detection automation and tooling that multiplies engineer output, aligning the automation roadmap with the team's needs.
• Drive proactive, transparent communication of RRT's work, coverage, and outcomes to stakeholders, partner teams, and detection leadership.

Qualifications

• Proven experience leading or mentoring a detection engineering, threat detection, or SOC-adjacent team.
• Current, hands-on detection engineering expertise: ability to personally write, review, and tune detection rules.
• Strong, hands-on experience with GitHub and detection-as-code pipelines.
• Hands-on experience developing detections across more than one engine (endpoint behavioral, signature-based such as YARA, and cloud or SIEM-based).
• Experience developing detections at a product or vendor company.
• Strong understanding of adversary behavior, MITRE ATT&CK, and real-world threats.
• A track record in fast-moving, SLO-driven environments with competing priorities.
• Excellent communication and stakeholder management skills.
• Experience establishing or maturing team processes, metrics, and documentation.
• Familiarity with intake and triage workflows and detection automation tooling is a strong plus.

Benefits

• Equity & Rewards: Restricted Stock Units (RSUs), Employee Stock Purchase Plan (ESPP).
• Time Off & Wellbeing: Flexible time off, Paid company holidays and paid sick time, Gender-neutral parental leave, Grandparent leave.
• Insurance & Financial Security: Medical, dental, and vision coverage, 401(k) retirement plan with company match, Life and disability insurance, Health and dependent care FSA, Voluntary benefits (hospital, accident, critical illness), Employee Assistance Program (EAP), ARAG pre-paid legal, Nationwide pet insurance, Cancer Care program, Global business travel medical insurance.
• Work Perks & Flexibility: Home office allowance, Mobile phone reimbursement.
• Wellness & Lifestyle: Wellness coach, Wellness/gym reimbursement, Fertility coverage, Adoption & surrogacy reimbursement.

Company Description

SentinelOne is a company at the intersection of AI and security, pioneering a new operating model for cybersecurity. Our AI-native platform unifies protection across endpoint, cloud, identity, data, and AI systems to deliver autonomous detection and response with clarity and speed. Our teams are builders, problem-solvers, and innovators committed to shaping the future of security.