Manager, Detection Engineering (Rapid Response Team)
Hybrid (United States)$164k - $226kFull-timePosted 2mo ago
About the role
Leadership role for SentinelOne's Rapid Response Team (RRT) within Detection Engineering, combining hands-on detection work with people management to ensure fast, reliable detection coverage across emerging threats, vulnerabilities, supply chain attacks, and detection gaps.
Responsibilities
- Stay hands-on: personally develop, review, and drive detections to merge and release, especially during surges and for the hardest threats, setting the technical standard the team is measured against.
- Lead, coach, and grow a team of five or more Senior to Staff detection engineers, owning hiring, development, performance, and day-to-day operations.
- Own RRT's operational cadence: threat triage and prioritization, SLO adherence, incident coordination, and workload balancing across concurrent threats.
- Protect the team's focus and capacity, shielding engineers from unscoped demand while ensuring high-priority work is met within target turnaround times.
- Grow cross-functional partnerships that extend RRT's reach, representing the team in shared forums that drive accountability, surface emerging threats, and communicate impact to leadership.
- Own and evolve the team's roadmap, process documentation, service charter, and metrics, keeping the operation mature, measurable, and defensible.
- Champion the detection automation and tooling that multiplies engineer output, aligning the automation roadmap with the team's needs.
- Drive proactive, transparent communication of RRT's work, coverage, and outcomes to stakeholders, partner teams, and detection leadership.
Qualifications
- Proven experience leading or mentoring a detection engineering, threat detection, or SOC-adjacent team.
- Direct people management is ideal, but a strong technical lead ready to step fully into management will also be considered.
- Current, hands-on detection engineering expertise: write, review, and tune detection rules; understand end-to-end detection lifecycle and feedback loops.
- Strong, hands-on experience with GitHub and detection-as-code pipelines, including pull requests, code review, and merge-to-release workflows.
- Hands-on experience developing detections across multiple engines (endpoint behavioral, signature-based such as YARA, and cloud or SIEM-based across data sources) or ability to ramp quickly.
- Experience developing detections at a product or vendor company spanning many customers and industries.
- Strong understanding of adversary behavior, MITRE ATT&CK, and real-world threats like ransomware.
- Track record in fast-moving, SLO-driven environments with competing priorities; flexibility to lead emergent threat responses.
- Excellent communication and stakeholder management skills; ability to represent a technical team to senior leadership and partner teams.
- Experience establishing or maturing team processes, metrics, and documentation for leadership to rely on.
- Familiarity with intake and triage workflows and detection automation tooling is a plus.
Skills
Required:Detection engineering leadershipDetection engineering hands-onGitHub and detection-as-codeDetections across enginesThreat intelligence and adversary behaviorCommunication & stakeholder management
Benefits
- Equity & Rewards: RSUs, Employee Stock Purchase Plan (ESPP)
- Time Off & Wellbeing: Flexible time off, paid holidays, paid sick time, gender-neutral parental leave, grandparent leave
- Insurance & Financial Security: Medical/dental/vision, 401(k) with match, life and disability insurance, FSA, voluntary benefits, EAP, legal, pet insurance, cancer care program, global travel medical insurance
- Work Perks & Flexibility: Home office allowance, mobile phone reimbursement
- Wellness & Lifestyle: Wellness coach, gym reimbursement, fertility coverage, adoption & surrogacy reimbursement
Last updated Oct 22, 2026. Interested? Apply on the company site.
About SentinelOne
AI-Powered Enterprise Cybersecurity Platform
SentinelOne unifies AI-powered endpoint, cloud, identity, and data protection—enhanced by our Security Data Lake for seamless and efficient cybersecurity.
CybersecurityAI SecurityEndpoint SecurityCloud SecurityAI-SIEMIdentity SecurityEDRXDR
More open roles at SentinelOne
- Enterprise Account Executive - Boston4d agoBoston, MA
- Solutions Engineer4d agoHybrid (Delhi NCR) · Solutions Engineering / Pre-sales
- Enterprise Account Executive4d agoHybrid (DACH)
- 4d ago
- Senior Manager, Solutions Engineering (California)4d agoHybrid (CA) · Unknown