Strong fit for technical professionals with SIEM and SOAR expertise who collaborate with partners and customers on complex security implementations.
Derived from job-description analysis by Serendipath's career intelligence engine.
Original posting from SentinelOne
Our Purpose
At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them becomes more critical than ever. When you join SentinelOne, your work helps protect global enterprises, critical infrastructure, and the technologies shaping tomorrow. If you are motivated by meaningful challenges and want your impact to be real, measurable, and global, you will find purpose here.
About Us
SentinelOne is a company at the intersection of AI and security, pioneering a new operating model for cybersecurity. Our AI-native platform unifies protection across endpoint, cloud, identity, data, and AI systems to deliver autonomous detection and response with clarity and speed. By combining real-time analytics, intelligent automation, and a unified data foundation, we reduce noise, simplify complexity, and empower security teams to focus on what truly matters.
Our teams are builders, problem-solvers, and innovators committed to shaping the future of security. If you are excited to solve hard problems alongside talented, mission-driven people, we invite you to help us build a safer future for humanity.
What Are We Looking For?
We’re looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes.
As a Professional Services Architect (AI SIEM & Hyperautomation), you will be tasked with designing and implementing effective security data and automation solutions for complex customer environments, drawing on strong SIEM and SOAR expertise and strong hands-on delivery experience. This is a hands-on, customer- and partner-facing technical role, and you will collaborate with partners and customers throughout the pre-sale to deployment lifecycle. You are not a people manager, and you are not primarily pre-sales; you are a skilled technical practitioner who brings technical credibility, clear communication, and a consultative approach to every engagement you lead. You will work effectively alongside partners, including MSSPs, system integrators, and resellers, providing direct technical guidance and contributing to the partner’s ability to deliver independently over time.
What Will You Do?
Primary responsibilities include:
Serve as the go-to expert on SentinelOne AI SIEM & Hyperautomation internally and with partners and customers; maintain a deep, up-to-date understanding of product architecture, integrations, use cases, and deployment models; stay informed on evolving threat landscapes, industry trends, and competing technologies to guide best practices.
Participate in technical discovery and requirements analysis for customer engagements, contributing to solution designs and implementation approaches that address each customer’s security objectives and technical constraints.
Support pre-sales and post-sales efforts, including scoping, architecture design, RFP responses, SOW development, and technical deep dives.
Support new and strategic delivery partners during their initial onboarding projects to build partner competence and assess their readiness to work independently; work alongside channel delivery partners, providing direct technical guidance during joint customer engagements to ensure implementations are executed to the agreed standard.
Provide strategic advisory services on risk mitigation, compliance alignment, and solution optimization.
Provide escalation support to partners and delivery teams for complex technical issues; respond to ad hoc implementation questions from certified partners; conduct periodic office hours for certified partners.
Define and document repeatable onboarding and delivery methodologies for SentinelOne solutions; establish standardized frameworks, playbooks, and checklists to improve consistency and quality; collaborate with Partner Delivery Assurance Engineers to document these implementation quality standards.
Partner with PS leadership to streamline service delivery and improve time-to-value for customers; drive continual improvement through post-engagement reviews and lessons learned, with input from Professional Services Consultants (PSCs) where available.
Build and maintain Partner Delivery Package assets, including implementation reference and troubleshooting guides, aligned to the standard playbooks; provide foundational content for partner learning paths and review partner learning path content with the Training team.
Host monthly partner Q&A sessions to address technical challenges raised by field teams; support partner certification and readiness, including AI SIEM implementation training, helping partner engineers reach delivery independence.
What Skills and Knowledge Will You Bring?
Ideal candidates will have:
5 or more years of experience in enterprise cybersecurity, with meaningful time in customer-facing technical roles such as Professional Services, technical consulting, solution engineering, or security architecture.
Deep hands-on experience with SIEM platforms (e.g., Splunk, SentinelOne AI SIEM, Exabeam, QRadar) and security data ingestion pipelines, including delivering or supporting complex migrations from incumbent SIEM and SOAR platforms, having worked within these environments at meaningful scale and contributed to architecture decisions; 3 or more years architecting large-scale SIEM data platforms (e.g., Splunk) is preferred.
Solid experience with SOAR or security automation, including workflow design and the use of scripting or programming languages (e.g., Python, Lua), REST APIs, and JSON to build data ingestion and automation workflows; proficiency in automating software processes, extracting data from databases, and designing and implementing automated software workflows is preferred.
Familiarity with logging pipelines, normalization (e.g., OCSF, ECS schemas), and integrations with third-party platforms (e.g., Okta, AWS, Palo Alto); experience with log shipping agents (e.g., Fluent Bit, Vector, Beats) and SIEM enrichment strategies is preferred.
Experience with EDR/XDR technologies and an understanding of how endpoint, identity, cloud, and SIEM products interconnect.
Experience contributing to the scoping of Professional Services engagements, including effort estimation and SOW input for multi-technology projects; a disciplined approach to assessing effort, risks, and dependencies, bringing structure to ambiguity and scoping only what can be delivered with excellence, is preferred.
Experience working alongside cybersecurity channel partners, including MSSPs, system integrators, or value-added resellers, in a delivery or technical advisory capacity; specific examples of contributing to partner-led customer engagements and helping to build partner capability over time is preferred.
Strong communication skills, with the ability to explain complex technical topics clearly to both technical teams and business stakeholders; mentorship and thought leadership, contributing to internal frameworks, delivery methodology, and service innovation for AI SIEM and Hyperautomation, is preferred.
Relevant industry certifications demonstrating expertise in security or related domains (e.g., CISSP, CCSP, AWS Certified Security - Specialty, or equivalent).
Background at a cybersecurity vendor, professional services practice, MSSP, system integrator, or enterprise security team in a technical delivery or consulting capacity is preferred; prior experience with SentinelOne’s platform or directly comparable enterprise SIEM and XDR solutions is an advantage, though demonstrable expertise in the relevant technology domains is what matters.
Why SentinelOne?
AI is redefining how the world operates and rewriting the rules of security in real time, and SentinelOne was built for this moment. From day one, we architected an AI-native platform designed to operate at machine speed, not as an add-on to legacy systems but as the foundation itself. If you want to build where innovation and impact move together, this is that place.
We invest in our Sentinels with comprehensive, competitive benefits designed to support you and your family:
Equity & Rewards
Restricted Stock Units (RSUs)
Employee Stock Purchase Plan (ESPP)
Performance-based bonus
Time Off & Wellbeing
Flexible time off, on top of the standard 5 weeks PTO
Paid company wellness days and fully paid short-term sick/nursing leave
Gender-neutral parental leave
Insurance & Financial Security
Private medical care benefit
Life and disability insurance
Pension Insurance contribution
Global business travel medical insurance
Employee Assistance Program (EAP)
Work Perks & Flexibility
Global home office allowance
Meal allowance
Hybrid work in Prague (Karlin), Brno (Clubco) or remote in CZ/SK. Only Prague-based employees are required to work from the office at least 2 days//week.
Wellness & Lifestyle
Wellbeing allowance
MultiSport benefit program
Wellness Coach app
SentinelOne is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.
SentinelOne participates in the E-Verify Program for all U.S. based roles.
To learn more about how we use AI in our hiring process, please review our AI in Hiring Candidate Disclosure.
Source: SentinelOne careers