Senior Engineering Manager, Linux & Cloud Workload Detection at SentinelOne

Tel-Aviv, Tel-Aviv District, Israel -

Full Time

Start Date

Immediate

Expiry Date

20 Dec, 25

Salary

0.0

Posted On

21 Sep, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Linux Internals, Cloud Workload Security, Detection Methodologies, Attacker Behaviors, MITRE ATT&CK, Endpoint Agents, Detection Content Development, Leadership, Communication, Collaboration, Behavioral Logic, Code Reviews, Threat Intelligence, Innovation, Ownership

Industry

Computer and Network Security

Description

About Us At SentinelOne, we’re redefining cybersecurity by pushing the limits of what’s possible—leveraging AI-powered, data-driven innovation to stay ahead of tomorrow’s threats. From building industry-leading products to cultivating an exceptional company culture, our core values guide everything we do. We’re looking for passionate individuals who thrive in collaborative environments and are eager to drive impact. If you’re excited about solving complex challenges in bold, innovative ways, we’d love to connect with you. What are we looking for? We are looking for a Senior Engineering Manager to lead our Linux & Cloud Workload Detection team. This team is responsible for building and evolving SentinelOne’s behavioral detection capabilities across Linux endpoints, servers, containers, and Kubernetes environments. You will manage a team of highly skilled detection engineers, drive the strategy for Linux and cloud workload visibility, and ensure our products stay ahead of emerging threats targeting modern infrastructures. What will you do? Lead and mentor a team of detection engineers specializing in detection content and behavioral logic for Linux, containers, and Kubernetes workloads. Partner with product management to define the detection strategy for Linux endpoints and cloud-native workloads, aligning with SentinelOne’s broader XDR and workload protection roadmap. Work with research teams to translate threat intelligence, attacker techniques, and MITRE ATT&CK coverage into high-fidelity detections. Drive quality and effectiveness of detections by performing code reviews, monitoring false positives/false negatives, refining behavioral logic, and scaling coverage. Foster a culture of innovation, ownership, and collaboration within the team and across the detection engineering org. What experience or knowledge should you bring? 5+ years of proven experience managing a Linux/Cloud engineering team, ideally an engineering team in endpoint or cloud workload security. Strong technical expertise in Linux internals (processes, syscalls, file system, networking) and container/Kubernetes runtime environments. Familiarity with threat detection methodologies, attacker behaviors, and frameworks such as MITRE ATT&CK. Hands-on background in endpoint agents or detection content development Strong leadership and communication skills with the ability to drive alignment across engineering, research, and product teams. Why us? We are at the forefront of the most dominant space of the Cyber Security market. You'll be working closely with some of the best researchers on the planet on the most innovative and challenging features that will shape the future of Cyber Security. You will be part of a truly global team that is rapidly growing around the world, on an amazing journey of success. You will work with great people in an open, fun environment, and you will be part of an organization that truly values its people. Study Funds- SentinelOne contributes 7.5% over your base salary (no tax ceiling is applied), and employees contribute 2.5% of their base salary Pension fund- SentinelOne contributes to your pension fund according to local law. Pension contribution may vary based on the selected plan. RSUs- 4 years vesting with 1-year cliff and then quarterly. Annual bonus (depending on the performance of the company) paid out in 2 cycles Employee Stock Purchase Plan- The plan enables employees to purchase SentinelOne stocks at discounted prices vs. market value. (the plan is subject to local taxation) Company time off and holidays Private medical insurance Meal allowance Home office allowance Hybrid work model- The possibility of working both from the office and working from home Parental Leave - Embracing a new child into the family is a unique moment for everyone! In support of that, we offer 20 weeks of fully paid leave for the birth parent and 12 weeks of paid leave for the non-birth parent Employee Assistance Program- Psychological sessions with certified therapists to help you overcome stress, personal and professional challenges Free Parking in our office building Music Room fully equipped room Wellness- workout sessions and a wellness app SentinelOne is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. SentinelOne participates in the E-Verify Program for all U.S. based roles.

Responsibilities

Lead and mentor a team of detection engineers specializing in detection content and behavioral logic for Linux, containers, and Kubernetes workloads. Partner with product management to define the detection strategy for Linux endpoints and cloud-native workloads, ensuring alignment with SentinelOne’s broader roadmap.