Staff MDR Investigator

As a Staff MDR Investigator, you will be tasked with leading advanced security investigations and response efforts, reporting to the Regional Manager, MDR Threat Response Operations.

What Will You Do?

Primary responsibilities include:

Working on active incidents, enriching threats, and perform Containment & Remediation

Generate and deliver Incident Reports with Technical and Executive Summary

Identifying areas of improvement through technical contributions enabling Operational efficiency and ingenuity

Investigation support:

-Assist MDR analysts with investigation of unusual or complex alerts or hunt findings, determining appropriate response actions, scoping impact, and containing Incidents

Analyst training and mentoring:

-Build and deliver training to MDR analysts, with a focus on effective and efficient alert investigation and immediate incident response.

-Assess the overall quality of MDR alert investigations, minor incident response, and escalations performed by in-region MDR analysts

Emerging Threat Response support:

-Partner with internal stakeholders (Wayfinder Threat Hunting, DFIR, Detection Engineering, CSM, etc) to share information and coordinate response to emerging threats                       -Perform necessary investigation and response measures to determine whether MDR customers are impacted (or at risk of being impacted) by emerging threats.

-Communicating with MDR customers on the steps being taken to protect them from emerging threats, and associated findings in the respective environments.

Collaborating with MDR Threat Advisors:

-Join customer calls/meetings (as requested) by Threat Advisors to provide additional SOC operations guidance and expertise.

-Support customer escalations including providing input to RCA reports.

What Skills and Knowledge Will You Bring?

Ideal candidates will have:

At least 5 years of experience as a security operations practitioner, with a focus on three or more of the following areas: SOC operations, security monitoring, incident response, digital forensic investigation, malware analysis, threat hunting, and threat intelligence.

Specialized seasoned skillset across the phases of Incident Response

Collaborating with Stakeholders through Incident Response recommendations

Advanced technical understanding of threat detection response and the current threat landscape.

Ability to make Security response decisions and possess analytical thinking

Ability to hunt, research and attribute Threat actor patterns and identify phase of Incidents through mapping with industry leading frameworks (Ex: MITRE)

Strong understanding of XDR-based Detection Engineering models

Familiarity with how MDR operations are structured and tasks performed by MDR Analysts.

Familiarity with all customer-facing capabilities of MDR and other SentinelOne threat services, including customer deliverables and SLAs.

Ability to effectively multitask and prioritize in a fast-paced operational environment.

Strong understanding of Windows, Mac & Linux operating system functionalities, including common attacker techniques, vulnerabilities and exposures, and preventative controls.

Excellent written and verbal communication skills.

Previous Managed Services/MDR experience.

Previous hands-on experience with various security operations tools in areas including EDR, XDR, IDR, malware sandboxes, threat intelligence, hunt, SIEM, and vulnerability management.

Fundamental understanding of diverse Security technologies including Cloud & Network Security

Fundamental understanding of Automation and LLM usage in SOC and MDR Operations

Why SentinelOne?

AI is redefining how the world operates and rewriting the rules of security in real time, and SentinelOne was built for this moment. From day one, we architected an AI-native platform designed to operate at machine speed, not as an add-on to legacy systems but as the foundation itself. If you want to build where innovation and impact move together, this is that place.

We invest in our Sentinels with comprehensive, competitive benefits designed to support you and your family:

Equity & Rewards

Restricted Stock Units (RSUs)

Employee Stock Purchase Plan (ESPP)

Time Off & Wellbeing

Competitive leave benefits

Gender-neutral parental leave

Insurance & Financial Security

Medical and insurance benefits

Employee Assistance Program (EAP)

Work Perks & Flexibility

Global home office allowance

Internet allowance

LinkedIn Learning license

Social Connect program

Food allowance (Bangalore office)

Meal vouchers (Sodexo)

Wellness & Lifestyle

Health & wellness benefit