DFIR Engagement Manager
Sentinel Labs
DFIR Engagement Manager
Job Description
Job ID: 7518230003
About Us
At SentinelOne, we’re redefining cybersecurity by pushing the limits of what’s possible—leveraging AI-powered, data-driven innovation to stay ahead of tomorrow’s threats.
From building industry-leading products to cultivating an exceptional company culture, our core values guide everything we do. We’re looking for passionate individuals who thrive in collaborative environments and are eager to drive impact. If you’re excited about solving complex challenges in bold, innovative ways, we’d love to connect with you.
About the role:
SentinelOne’s Vigilance DFIR team conducts digital forensic investigations and threat hunting operations for global clients. Our team provides multiple levels of proactive and reactive services to our clients to include incident readiness assessments, table-top exercises, purple-team activities, full-breach investigation, malware analysis, and hunting operations. The selected candidate will be an experienced investigator and endpoint-based hunter with superior technical and customer services skills.
Why us?
You will be joining a cutting-edge company, where you will tackle extraordinary challenges and work with the very best in the industry.
- Medical, Vision, Dental, 401(k), Commuter, Health and Dependent FSA
- Unlimited PTO
- Industry leading gender-neutral parental leave
- Paid Company Holidays
- Paid Sick Time
- Employee stock purchase program
- Disability and life insurance
- Employee assistance program
- Gym membership reimbursement
- Cell phone reimbursement
- Numerous company-sponsored events including regular happy hours and team building events
This U.S. role has a base pay range that will vary based on the location of the candidate. For some locations, a different pay range may apply. If so, this range will be provided to you during the recruiting process. You can also reach out to the recruiter with any questions.
SentinelOne is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.
SentinelOne participates in the E-Verify Program for all U.S. based roles.
Locations
- United States, (Remote)
Salary
Salary details available upon request
140,000 - 220,000 USD / yearly
Source: ai estimated
* This is an estimated range based on market data and may vary based on experience and qualifications.
Skills Required
- digital forensic investigationsintermediate
- threat hunting operationsintermediate
- incident readiness assessmentsintermediate
- table-top exercisesintermediate
- purple-team activitiesintermediate
- full-breach investigationintermediate
- malware analysisintermediate
- endpoint-based hunterintermediate
- technical expertiseintermediate
- customer services skillsintermediate
- endpoint forensicsintermediate
- log analysisintermediate
- EDR/XDR platformsintermediate
- security technologiesintermediate
- cyber threat intelligence platforms and processesintermediate
- client communicationintermediate
- relationship managementintermediate
- project managementintermediate
- team leadershipintermediate
Required Qualifications
- 5+ years of hands-on consulting experience in digital forensics and incident response (experience)
- Proven track record of managing complex incident response engagements (experience)
- Expert-level experience with industry-standard forensic tools and methodologies (experience)
- Strong understanding of and experience with EDR/XDR platforms and security technologies (experience)
- Demonstrated experience in endpoint-based threat-hunting and compromise assessments (experience)
- Experience working with cyber threat intelligence platforms and processes (experience)
- Excellence in client communication and relationship management (experience)
- Experience working with legal teams and insurance carriers (experience)
- Strong project management and team leadership skills (experience)
- Evident self-starter with intellectual curiosity and the ability to adapt to change (experience)
Preferred Qualifications
- Experience conducting malware analysis and memory forensics preferred (experience)
- Industry certifications (GCFE, GCFA, CFCE, EnCE, or similar) preferred (experience)
- Active participation in the security community through speaking engagements or publications preferred (experience)
Responsibilities
- Lead business development activities including scoping, requirements gathering, and contract development
- Collaborate with account teams and internal and external legal counsel to ensure service agreements and statements of work are in place
- Handle high-stakes client interactions involving legal counsel or executive stakeholders
- Oversee active DFIR investigations, ensuring exceptional quality and timeliness of deliverables
- Establish and maintain clear communication channels with all stakeholders
- Manage DFIR investigation objectives, timelines, resource allocation
- Coordinate cross-functional teams including internal resources and external vendors
- Handle escalations and resolve technical or operational challenges
- Ensure proper evidence handling and documentation throughout investigations
- Maintain oversight of case documentation and artifact archival
- Ensure adherence to standard operating procedures and best practices
- Lead post-engagement reviews and process improvement initiatives
- Conduct technical analysis including endpoint forensics, log analysis, and threat-hunting when required
- Maintain flexibility with schedule and participate in weekend and holiday on-call schedule
Benefits
- general: Medical, Vision, Dental, 401(k), Commuter, Health and Dependent FSA
- general: Unlimited PTO
- general: Industry leading gender-neutral parental leave
- general: Paid Company Holidays
- general: Paid Sick Time
- general: Employee stock purchase program
- general: Disability and life insurance
- general: Employee assistance program
- general: Gym membership reimbursement
- general: Cell phone reimbursement
- general: Numerous company-sponsored events including regular happy hours and team building events
Tags & Categories
Answer 10 quick questions to check your fit for DFIR Engagement Manager @ Sentinel Labs.
DFIR Engagement Manager
Sentinel Labs
DFIR Engagement Manager
Job Description
Job ID: 7518230003
About Us
At SentinelOne, we’re redefining cybersecurity by pushing the limits of what’s possible—leveraging AI-powered, data-driven innovation to stay ahead of tomorrow’s threats.
From building industry-leading products to cultivating an exceptional company culture, our core values guide everything we do. We’re looking for passionate individuals who thrive in collaborative environments and are eager to drive impact. If you’re excited about solving complex challenges in bold, innovative ways, we’d love to connect with you.
About the role:
SentinelOne’s Vigilance DFIR team conducts digital forensic investigations and threat hunting operations for global clients. Our team provides multiple levels of proactive and reactive services to our clients to include incident readiness assessments, table-top exercises, purple-team activities, full-breach investigation, malware analysis, and hunting operations. The selected candidate will be an experienced investigator and endpoint-based hunter with superior technical and customer services skills.
Why us?
You will be joining a cutting-edge company, where you will tackle extraordinary challenges and work with the very best in the industry.
- Medical, Vision, Dental, 401(k), Commuter, Health and Dependent FSA
- Unlimited PTO
- Industry leading gender-neutral parental leave
- Paid Company Holidays
- Paid Sick Time
- Employee stock purchase program
- Disability and life insurance
- Employee assistance program
- Gym membership reimbursement
- Cell phone reimbursement
- Numerous company-sponsored events including regular happy hours and team building events
This U.S. role has a base pay range that will vary based on the location of the candidate. For some locations, a different pay range may apply. If so, this range will be provided to you during the recruiting process. You can also reach out to the recruiter with any questions.
SentinelOne is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.
SentinelOne participates in the E-Verify Program for all U.S. based roles.
Locations
- United States, (Remote)
Salary
Salary details available upon request
140,000 - 220,000 USD / yearly
Source: ai estimated
* This is an estimated range based on market data and may vary based on experience and qualifications.
Skills Required
- digital forensic investigationsintermediate
- threat hunting operationsintermediate
- incident readiness assessmentsintermediate
- table-top exercisesintermediate
- purple-team activitiesintermediate
- full-breach investigationintermediate
- malware analysisintermediate
- endpoint-based hunterintermediate
- technical expertiseintermediate
- customer services skillsintermediate
- endpoint forensicsintermediate
- log analysisintermediate
- EDR/XDR platformsintermediate
- security technologiesintermediate
- cyber threat intelligence platforms and processesintermediate
- client communicationintermediate
- relationship managementintermediate
- project managementintermediate
- team leadershipintermediate
Required Qualifications
- 5+ years of hands-on consulting experience in digital forensics and incident response (experience)
- Proven track record of managing complex incident response engagements (experience)
- Expert-level experience with industry-standard forensic tools and methodologies (experience)
- Strong understanding of and experience with EDR/XDR platforms and security technologies (experience)
- Demonstrated experience in endpoint-based threat-hunting and compromise assessments (experience)
- Experience working with cyber threat intelligence platforms and processes (experience)
- Excellence in client communication and relationship management (experience)
- Experience working with legal teams and insurance carriers (experience)
- Strong project management and team leadership skills (experience)
- Evident self-starter with intellectual curiosity and the ability to adapt to change (experience)
Preferred Qualifications
- Experience conducting malware analysis and memory forensics preferred (experience)
- Industry certifications (GCFE, GCFA, CFCE, EnCE, or similar) preferred (experience)
- Active participation in the security community through speaking engagements or publications preferred (experience)
Responsibilities
- Lead business development activities including scoping, requirements gathering, and contract development
- Collaborate with account teams and internal and external legal counsel to ensure service agreements and statements of work are in place
- Handle high-stakes client interactions involving legal counsel or executive stakeholders
- Oversee active DFIR investigations, ensuring exceptional quality and timeliness of deliverables
- Establish and maintain clear communication channels with all stakeholders
- Manage DFIR investigation objectives, timelines, resource allocation
- Coordinate cross-functional teams including internal resources and external vendors
- Handle escalations and resolve technical or operational challenges
- Ensure proper evidence handling and documentation throughout investigations
- Maintain oversight of case documentation and artifact archival
- Ensure adherence to standard operating procedures and best practices
- Lead post-engagement reviews and process improvement initiatives
- Conduct technical analysis including endpoint forensics, log analysis, and threat-hunting when required
- Maintain flexibility with schedule and participate in weekend and holiday on-call schedule
Benefits
- general: Medical, Vision, Dental, 401(k), Commuter, Health and Dependent FSA
- general: Unlimited PTO
- general: Industry leading gender-neutral parental leave
- general: Paid Company Holidays
- general: Paid Sick Time
- general: Employee stock purchase program
- general: Disability and life insurance
- general: Employee assistance program
- general: Gym membership reimbursement
- general: Cell phone reimbursement
- general: Numerous company-sponsored events including regular happy hours and team building events
Tags & Categories
Answer 10 quick questions to check your fit for DFIR Engagement Manager @ Sentinel Labs.