Summary
What you’ll impact
The Senior Security Engineer will lead the administration, optimization, and expansion of the EDR/XDR platform for a multi-tenant client base in a fast‑paced managed security services environment. The role focuses on platform management, XDR integrations, hyper‑automation playbooks, custom log parsers, and comprehensive documentation while requiring on‑site presence in Massachusetts one day per week.
Responsibilities
What you'll do
- Serve as a primary technical owner for the SentinelOne EDR and XDR platform across all managed client environments
- Manage multi-tenant console configurations, policies, agent deployments, and platform health across municipal and institutional clients
- Monitor platform performance, conduct tuning, and implement changes to reduce noise while improving detection fidelity
- Design, build, and maintain XDR integrations with third-party data sources via API, including Microsoft Entra ID / Microsoft 365, Google Workspace (GWS), and other security telemetry sources in a multi-tenancy environment
- Evaluate new integration opportunities to strengthen cross-platform detection and response capabilities
- Create, maintain, and optimize SentinelOne Hyper-automation playbooks to automate response actions, alert enrichment, and workflow orchestration
- Translate repeatable analyst workflows into scalable automated processes that improve MTTR and reduce manual effort across the SOC team
- Continuously review and refine automation logic based on evolving threat patterns and client environment changes
- Develop and maintain custom log parsers to normalize and structure telemetry from diverse client environments and third-party security tools
- Ensure consistent and accurate data ingestion into the XDR platform to support detection engineering and reporting
- Create and maintain thorough documentation including runbooks, integration guides, playbook logic, parser specifications, and operational procedures
- Ensure documentation is current, accessible, and supports team scalability and onboarding
Requirements
What you’ll bring
- U.S Citizenship or permanent resident and must reside in or near Massachusetts and be available for on-site presence one day per week
- 5+ years of hands-on experience in security engineering, with recent SentinelOne platform experience
- Demonstrated expertise with SentinelOne XDR, including third-party integrations, API configuration, and multi-tenant management
- Proven experience building and managing SentinelOne Hyper-automation playbooks in a production environment
- Experience developing custom log parsers for security data normalization
- Strong proficiency with REST API integration and Python for security automation
- Experience with SIEM platforms and correlation rule development
- Knowledge of MITRE ATT&CK framework and its application to detection engineering
- Experience working in an MSSP or multi-tenant managed security environment