Staff MDR Investigator

Our Purpose

At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them becomes more critical than ever. When you join SentinelOne, your work helps protect global enterprises, critical infrastructure, and the technologies shaping tomorrow. If you are motivated by meaningful challenges and want your impact to be real, measurable, and global, you will find purpose here.

SentinelOne is a company at the intersection of AI and security, pioneering a new operating model for cybersecurity. Our AI-native platform unifies protection across endpoint, cloud, identity, data, and AI systems to deliver autonomous detection and response with clarity and speed. By combining real-time analytics, intelligent automation, and a unified data foundation, we reduce noise, simplify complexity, and empower security teams to focus on what truly matters.

Our teams are builders, problem-solvers, and innovators committed to shaping the future of security. If you are excited to solve hard problems alongside talented, mission-driven people, we invite you to help us build a safer future for humanity.

What Are We Looking For?

We’re looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes.

As a Staff MDR Investigator, you will be tasked with leading advanced security investigations and response efforts, reporting to the Regional Manager, MDR Threat Response Operations.

What Will You Do?

• Working on active incidents, enriching threats, and perform Containment & Remediation

• Generate and deliver Incident Reports with Technical and Executive Summary

• Identifying areas of improvement through technical contributions enabling Operational efficiency and ingenuity

• Investigation support: -Assist MDR analysts with investigation of unusual or complex alerts or hunt findings, determining appropriate response actions, scoping impact, and containing Incidents

• Analyst training and mentoring: -Build and deliver training to MDR analysts, with a focus on effective and efficient alert investigation and immediate incident response. -Assess the overall quality of MDR alert investigations, minor incident response, and escalations performed by in-region MDR analysts

• Emerging Threat Response support: -Partner with internal stakeholders (Wayfinder Threat Hunting, DFIR, Detection Engineering, CSM, etc) to share information and coordinate response to emerging threats -Perform necessary investigation and response measures to determine whether MDR customers are impacted (or at risk of being impacted) by emerging threats. -Communicating with MDR customers on the steps being taken to protect them from emerging threats, and associated findings in the respective environments.

• Collaborating with MDR Threat Advisors: -Join customer calls/meetings (as requested) by Threat Advisors to provide additional SOC operations guidance and expertise.