MDR Security Analyst

Our Purpose

At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them becomes more critical than ever. When you join SentinelOne, your work helps protect global enterprises, critical infrastructure, and the technologies shaping tomorrow. If you are motivated by meaningful challenges and want your impact to be real, measurable, and global, you will find purpose here.

About Us

SentinelOne is a company at the intersection of AI and security, pioneering a new operating model for cybersecurity. Our AI-native platform unifies protection across endpoint, cloud, identity, data, and AI systems to deliver autonomous detection and response with clarity and speed. By combining real-time analytics, intelligent automation, and a unified data foundation, we reduce noise, simplify complexity, and empower security teams to focus on what truly matters.

Our teams are builders, problem-solvers, and innovators committed to shaping the future of security. If you are excited to solve hard problems alongside talented, mission-driven people, we invite you to help us build a safer future for humanity.

What Are We Looking For?

We’re looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes.

As a MDR Analyst you will be tasked with Joining our Vigilance organization, an elite force of cybersecurity experts delivering a Managed Detection and Response (MDR) service to our largest customers. You'll help drive a world-class threat monitoring, hunting, and response service, playing an integral role in a 24x7 follow-the-sun global SOC.

You will work closely with key points of contact (POCs) and customers to provide an additional layer of security and confidence — leveraging intelligence feeds, threat logs, and IOCs (Indicators of Compromise) to detect and respond to threats effectively.

You'll also collaborate with our world-class threat research team and various R&D groups, helping to shape our product, keep customers more secure, and establish your presence within the broader cyber tech ecosystem.

What will you do?

Primary responsibilities include:

Proactively monitor and review threats and suspicious events from customers participating in the service Investigate alerts, triage, deep dive, and come up with proper action items and remediation plans.

Use multiple sources of data from the customer, our intelligence cloud, external threat feeds, etc.

Perform proactive hunting for threat data, leveraging our deep visibility abilities and proprietary research cloud.

Work with the customer to follow up on items that require additional investigation.

Provide Incident follow-up & support

Maintain excellent customer satisfaction through professional, proactive, and personal service

Work closely with our research and development team

Contribute to our knowledge base by creating malware analysis cookbooks and best practices

What Skills and Knowledge Will You Bring?

Ideal candidates will have:

1-3 years of experience with Technical Support, SOC, IR, Malware Analysis, or IT Security is a must

Strong network and security knowledge is desired

Experience with SQL, bash, python, and powershell

Professional and articulate with excellent written and verbal communication skills

Ability to multitask and prioritize

Multi-OS support experience: Windows, Mac & Linux (mobile platforms - an advantage)

Experience with incident response, computer forensic investigations, or threat hunting is a plus

Experience with host base (endpoint agent), or sandbox (network-based) security solutions is an advantage

Be able to work a fluid and dynamic schedule to cover hours and days outside of the normal work week

Why SentinelOne?

AI is redefining how the world operates and rewriting the rules of security in real time, and SentinelOne was built for this moment. From day one, we architected an AI-native platform designed to operate at machine speed, not as an add-on to legacy systems but as the foundation itself. If you want to build where innovation and impact move together, this is that place.

We invest in our Sentinels with comprehensive, competitive benefits designed to support you and your family:

Equity & Rewards

Restricted Stock Units (RSUs)

Employee Stock Purchase Plan (ESPP)

Time Off & Wellbeing

Competitive leave benefits

Gender-neutral parental leave

Employee Assistant Program

Workout sessions and a Wellness App

Insurance & Financial Security

Medical and insurance benefits

Pension

Employee Assistance Program (EAP)

Work Perks & Flexibility

Global home office allowance

Mobile phone reimbursement

Study Fund

SentinelOne is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

SentinelOne participates in the E-Verify Program for all U.S. based roles.