Staff Product Manager – EDR

The role

You will own the alert lifecycle within the EDR platform, including policy configuration, detection logic, and mitigation. You will shape end-to-end capabilities for endpoint and big data platforms by writing PRFAQs, roadmaps, and user stories.

What you will do

• Shape end-to-end capabilities for endpoint and big data platforms
• Write PRFAQs, roadmap decks, EPICs, and user stories for the alert lifecycle domain
• Partner with Detection Engineering and Threat Research on indicator/IOC strategy and behavioral rule development
• Partner with Data/ML teams where detections are model-driven
• Collaborate with Console, Agents, UX/UI, QA and field teams to ship releases
• Engage with customers, SOC analysts and prospects to uncover pain points
• Define and track success metrics for the domain and report to leadership

Required qualifications

• 6+ years in product management
• Track record of shipping security software at scale
• Cybersecurity product experience
• Working knowledge of MITRE ATT&CK and ATLAS
• Experience balancing detection coverage against false-positive rate and alert fatigue
• Technical fluency reading telemetry/logs
• Ability to write basic queries (SQL or similar) against event/alert data
• Ability to discuss agent-level concepts like kernel drivers, ETW/syscall hooking with engineers
• Strong communicator

Nice to have

• Experience in EDR/XDR, detection engineering or SOC-facing tooling
• Experience with the AI threat landscape
• Prior hands-on experience as a threat hunter, security researcher, SOC analyst, or agent developer

Benefits

• Restricted Stock Units (RSUs)
• Employee Stock Purchase Plan (ESPP)
• Competitive leave benefits
• Gender-neutral parental leave
• Employee Assistant Program
• Workout sessions and a Wellness App
• Medical and insurance benefits
• Pension
• Global home office allowance
• Mobile phone reimbursement
• Study Fund

About the company

SentinelOne is a company at the intersection of AI and security, pioneering a new operating model for cybersecurity. Their AI-native platform unifies protection across endpoint, cloud, identity, data, and AI systems.