← All roles

Windows Detection Engineering Manager

SentinelOne· Engineering
Apply on company site
Hybrid (Remote / Flexible)Full-timePosted 3w ago

About the role

Lead a strategic team of detection engineers to advance Windows behavioral detections and in-memory traps, shaping the future of endpoint security with a unified, converged platform that automatically prevents, detects, and responds to threats in real time.

Responsibilities

  • Manage a team of detection engineers and guide them through the research and development of detection rules and infrastructure.
  • Drive detection of the newest malware and exploits based on SentinelOne’s Endpoint Protection platform; oversee end-to-end behavior-based detection capabilities from research to product implementation (C++23 and Lua).
  • Lead the development and research of attack tools, PoCs, and discovery of new ways to detect/prevent exploitation attacks (EoP, drive-by attacks, and more).
  • Deliverables will enhance the security of millions of Windows endpoints protected by SentinelOne.

Qualifications

  • Proven experience in leading a team of researchers or detection engineers (highly preferred).
  • Experience in writing behavioral detection rules and evaluating rule efficacy.
  • Excellent understanding of Windows Internals (Process and Threads, Virtual Memory, etc.).
  • Modern C++ experience and understanding of existing AV/EDR internals (advantage).

Skills

Required:Behavioral detection rulesWindows Internals
Nice to have:C++

Benefits

  • Restricted Stock Units (RSUs)
  • Employee Stock Purchase Plan (ESPP)
  • Competitive leave benefits
  • Gender-neutral parental leave
  • Employee Assistance Program
  • Workout sessions and Wellness App
  • Medical and insurance benefits
  • Pension
  • Global home office allowance
  • Mobile phone reimbursement
  • Study Fund
Last updated Oct 22, 2026. Interested? Apply on the company site.
SentinelOne logo

About SentinelOne

AI-Powered Enterprise Cybersecurity Platform

SentinelOne unifies AI-powered endpoint, cloud, identity, and data protection—enhanced by our Security Data Lake for seamless and efficient cybersecurity.

CybersecurityAI SecurityEndpoint SecurityCloud SecurityAI-SIEMIdentity SecurityEDRXDR
Company profileWebsite

More open roles at SentinelOne