SentinelOne AI SIEM

This is a remote position.

Job Title: SentinelOne AI SIEM Consultant / Engineer

Job Summary

We are looking for an experienced SentinelOne AI SIEM Consultant / Engineer with strong expertise in AI-driven SIEM, threat detection, incident response, and SOC operations. The candidate will be responsible for implementing, integrating, and optimizing the SentinelOne Singularity AI SIEM platform to enhance security monitoring and response capabilities.

Key Responsibilities

• Design, implement, and configure SentinelOne AI SIEM (Singularity Platform)
  

• Integrate multiple log sources including Endpoints, Firewalls, Network Devices, Cloud platforms, and IAM systems
  

• Develop and tune correlation rules, alerts, dashboards, and reports
  

• Monitor, analyze, triage, and respond to security incidents
  

• Reduce false positives and improve detection accuracy
  

• Map threats using the MITRE ATT&CK framework
  

• Support SOC operations (L1–L3) and incident response workflows
  

• Ensure compliance support for standards such as ISO 27001, SOC 2, PCI-DSS, etc.
  

• Provide technical documentation and knowledge transfer to stakeholders
  

Required Skills & Qualifications

• Hands-on experience with SentinelOne Singularity AI SIEM / XDR
  

• Strong understanding of SIEM concepts: log management, correlation, alerting, incident response
  

• Knowledge of Endpoint, Network, and Cloud Security
  

• Experience with SOC operations and incident handling
  

• Understanding of Threat Intelligence, IOC analysis, and MITRE ATT&CK
  

• Exposure to scripting or automation (Python, PowerShell – preferred)
  

• Good knowledge of TCP/IP, DNS, HTTP/HTTPS, SSL
  

Preferred / Nice to Have

• SentinelOne certifications
  

• Experience with other SIEM tools such as Splunk, QRadar, Azure Sentinel, Elastic SIEM
  

• SOAR or security automation experience
  

• Experience in creating IR playbooks and security use cases