Principal Software Engineer, AI SIEM

responsibilities include:</p> <ul> <li>Build a working mental model of the full system, including ingest and storage, query and retrieval, analyst-facing workflows (alerts, findings, assets, incidents), and the detection engines (rule-based and beyond), and use it to identify where architecture is solid, where it's fragile, and where teams are unknowingly duplicating effort or leaving gaps between their boundaries.</li> <li>Drive cross-team architectural decisions that affect multiple parts of the system at once, for example, how ingest-time enrichment should relate to detection logic, or how detection output should shape what an analyst sees and can act on.</li> <li>Partner with the engineering leads of each pillar (data platform, analyst experience, detection engines) as a peer thought partner, not a top-down authority, influencing through technical credibility and clear reasoning, not mandate.</li> <li>Identify and prioritize the highest-leverage architectural investments across the system, and make the case for them to engineering leadership and product.</li> <li>Get hands-on where it matters: prototype, review, and occasionally build the connective tissue between pillars when no single team naturally owns it.</li> <li>Establish and champion cross-cutting technical standards, for APIs, data contracts, and service boundaries, that keep independently-developed pillars interoperable as they evolve.</li> <li>Mentor senior and staff engineers across teams, raising the bar for architectural thinking org-wide, not just within one team.</li> <li>Represent the technical health of the overall system in planning and leadership conversations, translating "what's exceptional, what's a gap, what's redundant" into a roadmap.</li> </ul> <h3>What Skills and Knowledge Will You Bring?</h3> <p>Ideal candidates will have:</p> <ul> <li>Deep experience (15 or more years) building and operating large-scale distributed backend systems, with direct experience in at least two of: high-throughput data ingest/storage, query engines, or detection/rules systems.</li> <li>A demonstrated track record of reasoning about systems at the architecture level, not just implementing a spec, but identifying where a system's boundaries are wrong, where

responsibilities overlap, and where they leave gaps.</li> <li>Experience designing APIs and service contracts that need to hold up across teams and years, not just within one codebase.</li> <li>Comfort operating without a single clear chain of command, influencing peer teams and senior engineers through the strength of your reasoning.</li> <li>A four-year degree in Computer Science or equivalent practical experience.</li> <li>Familiarity with security operations concepts (alerts, findings, assets, incidents, detection rules) is preferred; if you don't have direct SIEM/XDR background, you should be someone who can get fluent in a new domain fast.</li> <li>Experience with modern cloud infrastructure and data-intensive systems (distributed storage, high-cardinality querying, streaming pipelines) is preferred; specific tools matter less than demonstrated judgment about tradeoffs at scale.</li> <li>Exposure to both rule-based and ML/AI-driven detection approaches is a plus, but the more important trait is being able to reason about when each is the right tool.</li> </ul> <h3>Why SentinelOne?</h3> <p>AI is redefining how the world operates and rewriting the rules of security in real time, and SentinelOne was built for this moment. From day one, we architected an AI-native platform designed to operate at machine speed, not as an add-on to legacy systems but as the foundation itself. If you want to build where innovation and impact move together, this is that place.</p> <p>We invest in our Sentinels with comprehensive, competitive

benefits designed to support you and your family:</p> <p><strong>Equity & Rewards</strong></p> <ul> <li>Restricted Stock Units (RSUs)</li> <li>Employee Stock Purchase Plan (ESPP)</li> </ul> <p><strong>Time Off & Wellbeing</strong></p> <ul> <li>Flexible time off</li> <li>Paid company holidays and paid sick time</li> <li>Gender-neutral parental leave</li> <li>Grandparent leave</li> </ul> <p><strong>Insurance & Financial Security</strong></p> <ul> <li>Medical, dental, and vision coverage</li> <li>401(k) retirement plan with company match</li> <li>Life and disability insurance</li> <li>Health and dependent care FSA</li> <li>Voluntary

benefits (hospital, accident, critical illness)</li> <li>Employee Assistance Program (EAP)</li> <li>ARAG pre-paid legal</li> <li>Nationwide pet insurance</li> <li>Cancer Care program</li> <li>Global business travel medical insurance</li> </ul> <p><strong>Work

Perks & Flexibility</strong></p> <ul> <li>Home office allowance</li> <li>Mobile phone reimbursement</li> </ul> <p><strong>Wellness & Lifestyle</strong></p> <ul> <li>Wellness coach</li> <li>Wellness/gym reimbursement</li> <li>Fertility coverage</li> <li>Adoption & surrogacy reimbursement</li> </ul><div class="content-pay-transparency"><div class="pay-input"><div class="description"><p><span style="font-weight: 400;"><span style="font-size: 18px;">This U.S. role has a base pay range that will vary based on the location of the candidate. For some locations, a different pay range may apply.  If so, this range will be provided to you during the recruiting process. You can also reach out to the recruiter with any questions.</span><br></span></p></div><div class="title">Base Salary Range</div><div class="pay-range"><span>$216,000</span><span class="divider">—</span><span>$297,000 USD</span></div></div></div><div class="content-conclusion"><p><span style="font-weight: 400;">SentinelOne is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.</span></p> <p><span style="font-weight: 400;">SentinelOne participates in the E-Verify Program for all U.S. based roles. </span></p></div>

A meeting lands on your calendar

If they’re a yes, I book the chat. You show up — that’s the whole job-hunt.