Sr. Manager – MDR Threat Detection and Hunting

Sr. Manager – MDR Threat Detection and Hunting

Requirements

• 10+ years of prior experience in threat detection and hunting, preferably with experience delivering managed threat hunting services.
• A detailed technical understanding of the threat landscape, including attacker TTPs and major threat actors and groups.
• Prior experience effectively and efficiently identifying attacker activity at scale, including: Developing, testing and tuning SIEM/XDR/EDR threat detection rules; Curating high fidelity IOCs for use in threat detection and hunting; Proactively hunting for new and novel threats across endpoint, cloud, identity, and network telemetry; Solving complex engineering and architectural challenges inherent in threat hunting across large data sets.
• Familiarity with open standards related to threat detection and response, such as Sigma, YARA, and OCSF.
• Prior experience developing scalable threat detection and response tooling and infrastructure.
• Prior leadership experience, either in a formal management role or as a technical team lead.
• An unwavering passion for the mission: protecting organizations of all sizes from ‘bad guys and breaches’.

Responsibilities

• Delivering proactive threat hunting services to SentinelOne MDR customers, with a focus on emerging threats and novel attacker TTPs.
• Capturing threat intelligence gathered during these hunts for use by other SentinelOne products and services.
• Developing and publishing threat intelligence advisories to SentinelOne customers.
• Leveraging our visibility across thousands of organizations and millions of endpoints to continually improve the threat detection capabilities of SentinelOne products.
• Serving as the key technical stakeholder for managed threat hunting at SentinelOne, providing requirements and feedback to product and engineering teams responsible for developing and supporting threat hunting tools and infrastructure.
• Setting a high bar for the quality and depth of the technical work performed by your team, and providing the necessary resourcing, guidance and development opportunities to enable their success.
• Engaging with MDR customers as needed to discuss managed threat hunting capabilities and roadmap.
• Representing SentinelOne MDR services at company events and conferences.

Preferred Qualifications

No preferred qualifications provided.