Professional Services Architect (AI SIEM & Hyperautomation)

Our Purpose

At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them becomes more critical than ever. When you join SentinelOne, your work helps protect global enterprises, critical infrastructure, and the technologies shaping tomorrow. If you are motivated by meaningful challenges and want your impact to be real, measurable, and global, you will find purpose here.

About Us

SentinelOne is a company at the intersection of AI and security, pioneering a new operating model for cybersecurity. Our AI-native platform unifies protection across endpoint, cloud, identity, data, and AI systems to deliver autonomous detection and response with clarity and speed. By combining real-time analytics, intelligent automation, and a unified data foundation, we reduce noise, simplify complexity, and empower security teams to focus on what truly matters.

Our teams are builders, problem-solvers, and innovators committed to shaping the future of security. If you are excited to solve hard problems alongside talented, mission-driven people, we invite you to help us build a safer future for humanity.

What Are We Looking For?

We’re looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes.

As a Professional Services Architect (AI SIEM & Hyperautomation), you will be tasked with designing and implementing effective security data and automation solutions for complex customer environments, drawing on strong SIEM and SOAR expertise and strong hands-on delivery experience. This is a hands-on, customer- and partner-facing technical role, and you will collaborate with partners and customers throughout the pre-sale to deployment lifecycle. You are not a people manager, and you are not primarily pre-sales; you are a skilled technical practitioner who brings technical credibility, clear communication, and a consultative approach to every engagement you lead. You will work effectively alongside partners, including MSSPs, system integrators, and resellers, providing direct technical guidance and contributing to the partner’s ability to deliver independently over time.

What Will You Do?

Primary responsibilities include:

• Serve as the go-to expert on SentinelOne AI SIEM & Hyperautomation internally and with partners and customers; maintain a deep, up-to-date understanding of product architecture, integrations, use cases, and deployment models; stay informed on evolving threat landscapes, industry trends, and competing technologies to guide best practices.

• Participate in technical discovery and requirements analysis for customer engagements, contributing to solution designs and implementation approaches that address each customer’s security objectives and technical constraints.

• Support pre-sales and post-sales efforts, including scoping, architecture design, RFP responses, SOW development, and technical deep dives.

• Support new and strategic delivery partners during their initial onboarding projects to build partner competence and assess their readiness to work independently; work alongside channel delivery partners, providing direct technical guidance during joint customer engagements to ensure implementations are executed to the agreed standard.

• Provide strategic advisory services on risk mitigation, compliance alignment, and solution optimization.

• Provide escalation support to partners and delivery teams for complex technical issues; respond to ad hoc implementation questions from certified partners; conduct periodic office hours for certified partners.

• Define and document repeatable onboarding and delivery methodologies for SentinelOne solutions; establish standardized frameworks, playbooks, and checklists to improve consistency and quality; collaborate with Partner Delivery Assurance Engineers to document these implementation quality standards.

• Partner with PS leadership to streamline service delivery and improve time-to-value for customers; drive continual improvement through post-engagement reviews and lessons learned, with input from Professional Services Consultants (PSCs) where available.

• Build and maintain Partner Delivery Package assets, including implementation reference and troubleshooting guides, aligned to the standard playbooks; provide foundational content for partner learning paths and review partner learning path content with the Training team.

• Host monthly partner Q&A sessions to address technical challenges raised by field teams; support partner certification and readiness, including AI SIEM implementation training, helping partner engineers reach delivery independence.

What Skills and Knowledge Will You Bring?

Ideal candidates will have:

• 5 or more years of experience in enterprise cybersecurity, with meaningful time in customer-facing technical roles such as Professional Services, technical consulting, solution engineering, or security architecture.

• Deep hands-on experience with SIEM platforms (e.g., Splunk, SentinelOne AI SIEM, Exabeam, QRadar) and security data ingestion pipelines, including delivering or supporting complex migrations from incumbent SIEM and SOAR platforms, having worked within these environments at meaningful scale and contributed to architecture decisions; 3 or more years architecting large-scale SIEM data platforms (e.g., Splunk) is preferred.

• Solid experience with SOAR or security automation, including workflow design and the use of scripting or programming languages (e.g., Python, Lua), REST APIs, and JSON to build data ingestion and automation workflows; proficiency in automating software processes, extracting data from databases, and designing and implementing automated software workflows is preferred.

• Familiarity with logging pipelines, normalization (e.g., OCSF, ECS schemas), and integrations with third-party platforms (e.g., Okta, AWS, Palo Alto); experience with log shipping agents (e.g., Fluent Bit, Vector, Beats) and SIEM enrichment strategies is preferred.

• Experience with EDR/XDR technologies and an understanding of how endpoint, identity, cloud, and SIEM products interconnect.

• Experience contributing to the scoping of Professional Services engagements, including effort estimation and SOW input for multi-technology projects; a disciplined approach to assessing effort, risks, and dependencies, bringing structure to ambiguity and scoping only what can be delivered with excellence, is preferred.

• Experience working alongside cybersecurity channel partners, including MSSPs, system integrators, or value-added resellers, in a delivery or technical advisory capacity; specific examples of contributing to partner-led customer engagements and helping to build partner capability over time is preferred.

• Strong communication skills, with the ability to explain complex technical topics clearly to both technical teams and business stakeholders; mentorship and thought leadership, contributing to internal frameworks, delivery methodology, and service innovation for AI SIEM and Hyperautomation, is preferred.

• Relevant industry certifications demonstrating expertise in security or related domains (e.g., CISSP, CCSP, AWS Certified Security - Specialty, or equivalent).

…