Senior Manager, Linux & Cloud Detection Engineering
Sentinel Labs
Senior Manager, Linux & Cloud Detection Engineering
Job Description
Job ID: 7409749003
About Us
At SentinelOne, we’re redefining cybersecurity by pushing the limits of what’s possible—leveraging AI-powered, data-driven innovation to stay ahead of tomorrow’s threats.
From building industry-leading products to cultivating an exceptional company culture, our core values guide everything we do. We’re looking for passionate individuals who thrive in collaborative environments and are eager to drive impact. If you’re excited about solving complex challenges in bold, innovative ways, we’d love to connect with you.
What are we looking for?
We are looking for a Senior Engineering Manager to lead our Linux & Cloud Workload Detection team. This role owns the evolution of SentinelOne’s behavioral detection capabilities across Linux endpoints, servers, containers, and Kubernetes environments. You will manage a team of highly skilled detection engineers, drive the strategy for Linux and cloud workload visibility, and ensure our products stay ahead of emerging threats targeting modern infrastructure.
What will you do?
Technical & domain ownership
- Own SentinelOne’s Linux & Cloud Workload behavioral detection strategy across endpoints, servers, containers, and Kubernetes.
- The team focuses on behavioral detections and agent-side logic, rather than signature-based or IOC-driven rules.
- Define what “high-fidelity detection” means for modern Linux and cloud-native attacks.
- Drive coverage of attacker techniques using behavioral signals, not signatures.
People & org leadership
- Lead and grow a team of senior detection engineers.
- Set technical standards, review detection logic, and raise the bar on quality and impact.
- Build strong collaboration with Research, Product, and Platform teams.
What experience or knowledge should you bring?
- Proven experience leading and growing senior engineering teams working on Linux, cloud infrastructure, or cloud-native systems.
- Strong understanding of Linux internals and cloud runtime environments (containers, Kubernetes).
- Hands-on experience with behavioral detection, threat analytics, or similar systems that reason about attacker behavior and system signals in production environments..
- Familiarity with attacker techniques and frameworks such as MITRE ATT&CK.
- Ability to reason about detection quality, false positives/false negatives, and coverage tradeoffs.
Why us?
We are at the forefront of the most dominant space of the Cyber Security market. You'll be working closely with some of the best researchers on the planet on the most innovative and challenging features that will shape the future of Cyber Security. You will be part of a truly global team that is rapidly growing around the world, on an amazing journey of success. You will work with great people in an open, fun environment, and you will be part of an organization that truly values its people.
- Study Funds- SentinelOne contributes 7.5% over your base salary (no tax ceiling is applied), and employees contribute 2.5% of their base salary
- Pension fund- SentinelOne contributes to your pension fund according to local law. Pension contribution may vary based on the selected plan.
- RSUs- 4 years vesting with 1-year cliff and then quarterly.
- Annual bonus (depending on the performance of the company) paid out in 2 cycles
- Employee Stock Purchase Plan- The plan enables employees to purchase SentinelOne stocks at discounted prices vs. market value. (the plan is subject to local taxation)
- Company time off and holidays
- Private medical insurance
- Meal allowance
- Home office allowance
- Hybrid work model- The possibility of working both from the office and working from home
- Parental Leave - Embracing a new child into the family is a unique moment for everyone! In support of that, we offer 20 weeks of fully paid leave for the birth parent and 12 weeks of paid leave for the non-birth parent
- Employee Assistance Program- Psychological sessions with certified therapists to help you overcome stress, personal and professional challenges
- Free Parking in our office building
- Music Room fully equipped room
- Wellness- workout sessions and a wellness app
SentinelOne is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.
SentinelOne participates in the E-Verify Program for all U.S. based roles.
Locations
- Tel Aviv-Yafo, Tel Aviv District, Israel
Salary
Salary details available upon request
280,000 - 450,000 ILS / yearly
Source: ai estimated
* This is an estimated range based on market data and may vary based on experience and qualifications.
Skills Required
- Linux internalsintermediate
- cloud runtime environments (containers, Kubernetes)intermediate
- behavioral detectionintermediate
- threat analyticsintermediate
- attacker techniquesintermediate
- MITRE ATT&CKintermediate
- detection quality, false positives/false negatives, and coverage tradeoffsintermediate
- leading and growing senior engineering teamsintermediate
Required Qualifications
- Proven experience leading and growing senior engineering teams working on Linux, cloud infrastructure, or cloud-native systems. (experience)
- Strong understanding of Linux internals and cloud runtime environments (containers, Kubernetes). (experience)
- Hands-on experience with behavioral detection, threat analytics, or similar systems that reason about attacker behavior and system signals in production environments. (experience)
- Familiarity with attacker techniques and frameworks such as MITRE ATT&CK. (experience)
- Ability to reason about detection quality, false positives/false negatives, and coverage tradeoffs. (experience)
Responsibilities
- Own SentinelOne’s Linux & Cloud Workload behavioral detection strategy across endpoints, servers, containers, and Kubernetes.
- The team focuses on behavioral detections and agent-side logic, rather than signature-based or IOC-driven rules.
- Define what “high-fidelity detection” means for modern Linux and cloud-native attacks.
- Drive coverage of attacker techniques using behavioral signals, not signatures.
- Lead and grow a team of senior detection engineers.
- Set technical standards, review detection logic, and raise the bar on quality and impact.
- Build strong collaboration with Research, Product, and Platform teams.
Benefits
- general: Study Funds- SentinelOne contributes 7.5% over your base salary (no tax ceiling is applied), and employees contribute 2.5% of their base salary
- general: Pension fund- SentinelOne contributes to your pension fund according to local law. Pension contribution may vary based on the selected plan.
- general: RSUs- 4 years vesting with 1-year cliff and then quarterly.
- general: Annual bonus (depending on the performance of the company) paid out in 2 cycles
- general: Employee Stock Purchase Plan- The plan enables employees to purchase SentinelOne stocks at discounted prices vs. market value. (the plan is subject to local taxation)
- general: Company time off and holidays
- general: Private medical insurance
- general: Meal allowance
- general: Home office allowance
- general: Hybrid work model- The possibility of working both from the office and working from home
- general: Parental Leave - Embracing a new child into the family is a unique moment for everyone! In support of that, we offer 20 weeks of fully paid leave for the birth parent and 12 weeks of paid leave for the non-birth parent
- general: Employee Assistance Program- Psychological sessions with certified therapists to help you overcome stress, personal and professional challenges
- general: Free Parking in our office building
- general: Music Room fully equipped room
- general: Wellness- workout sessions and a wellness app
Tags & Categories
Answer 10 quick questions to check your fit for Senior Manager, Linux & Cloud Detection Engineering @ Sentinel Labs.
Senior Manager, Linux & Cloud Detection Engineering
Sentinel Labs
Senior Manager, Linux & Cloud Detection Engineering
Job Description
Job ID: 7409749003
About Us
At SentinelOne, we’re redefining cybersecurity by pushing the limits of what’s possible—leveraging AI-powered, data-driven innovation to stay ahead of tomorrow’s threats.
From building industry-leading products to cultivating an exceptional company culture, our core values guide everything we do. We’re looking for passionate individuals who thrive in collaborative environments and are eager to drive impact. If you’re excited about solving complex challenges in bold, innovative ways, we’d love to connect with you.
What are we looking for?
We are looking for a Senior Engineering Manager to lead our Linux & Cloud Workload Detection team. This role owns the evolution of SentinelOne’s behavioral detection capabilities across Linux endpoints, servers, containers, and Kubernetes environments. You will manage a team of highly skilled detection engineers, drive the strategy for Linux and cloud workload visibility, and ensure our products stay ahead of emerging threats targeting modern infrastructure.
What will you do?
Technical & domain ownership
- Own SentinelOne’s Linux & Cloud Workload behavioral detection strategy across endpoints, servers, containers, and Kubernetes.
- The team focuses on behavioral detections and agent-side logic, rather than signature-based or IOC-driven rules.
- Define what “high-fidelity detection” means for modern Linux and cloud-native attacks.
- Drive coverage of attacker techniques using behavioral signals, not signatures.
People & org leadership
- Lead and grow a team of senior detection engineers.
- Set technical standards, review detection logic, and raise the bar on quality and impact.
- Build strong collaboration with Research, Product, and Platform teams.
What experience or knowledge should you bring?
- Proven experience leading and growing senior engineering teams working on Linux, cloud infrastructure, or cloud-native systems.
- Strong understanding of Linux internals and cloud runtime environments (containers, Kubernetes).
- Hands-on experience with behavioral detection, threat analytics, or similar systems that reason about attacker behavior and system signals in production environments..
- Familiarity with attacker techniques and frameworks such as MITRE ATT&CK.
- Ability to reason about detection quality, false positives/false negatives, and coverage tradeoffs.
Why us?
We are at the forefront of the most dominant space of the Cyber Security market. You'll be working closely with some of the best researchers on the planet on the most innovative and challenging features that will shape the future of Cyber Security. You will be part of a truly global team that is rapidly growing around the world, on an amazing journey of success. You will work with great people in an open, fun environment, and you will be part of an organization that truly values its people.
- Study Funds- SentinelOne contributes 7.5% over your base salary (no tax ceiling is applied), and employees contribute 2.5% of their base salary
- Pension fund- SentinelOne contributes to your pension fund according to local law. Pension contribution may vary based on the selected plan.
- RSUs- 4 years vesting with 1-year cliff and then quarterly.
- Annual bonus (depending on the performance of the company) paid out in 2 cycles
- Employee Stock Purchase Plan- The plan enables employees to purchase SentinelOne stocks at discounted prices vs. market value. (the plan is subject to local taxation)
- Company time off and holidays
- Private medical insurance
- Meal allowance
- Home office allowance
- Hybrid work model- The possibility of working both from the office and working from home
- Parental Leave - Embracing a new child into the family is a unique moment for everyone! In support of that, we offer 20 weeks of fully paid leave for the birth parent and 12 weeks of paid leave for the non-birth parent
- Employee Assistance Program- Psychological sessions with certified therapists to help you overcome stress, personal and professional challenges
- Free Parking in our office building
- Music Room fully equipped room
- Wellness- workout sessions and a wellness app
SentinelOne is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.
SentinelOne participates in the E-Verify Program for all U.S. based roles.
Locations
- Tel Aviv-Yafo, Tel Aviv District, Israel
Salary
Salary details available upon request
280,000 - 450,000 ILS / yearly
Source: ai estimated
* This is an estimated range based on market data and may vary based on experience and qualifications.
Skills Required
- Linux internalsintermediate
- cloud runtime environments (containers, Kubernetes)intermediate
- behavioral detectionintermediate
- threat analyticsintermediate
- attacker techniquesintermediate
- MITRE ATT&CKintermediate
- detection quality, false positives/false negatives, and coverage tradeoffsintermediate
- leading and growing senior engineering teamsintermediate
Required Qualifications
- Proven experience leading and growing senior engineering teams working on Linux, cloud infrastructure, or cloud-native systems. (experience)
- Strong understanding of Linux internals and cloud runtime environments (containers, Kubernetes). (experience)
- Hands-on experience with behavioral detection, threat analytics, or similar systems that reason about attacker behavior and system signals in production environments. (experience)
- Familiarity with attacker techniques and frameworks such as MITRE ATT&CK. (experience)
- Ability to reason about detection quality, false positives/false negatives, and coverage tradeoffs. (experience)
Responsibilities
- Own SentinelOne’s Linux & Cloud Workload behavioral detection strategy across endpoints, servers, containers, and Kubernetes.
- The team focuses on behavioral detections and agent-side logic, rather than signature-based or IOC-driven rules.
- Define what “high-fidelity detection” means for modern Linux and cloud-native attacks.
- Drive coverage of attacker techniques using behavioral signals, not signatures.
- Lead and grow a team of senior detection engineers.
- Set technical standards, review detection logic, and raise the bar on quality and impact.
- Build strong collaboration with Research, Product, and Platform teams.
Benefits
- general: Study Funds- SentinelOne contributes 7.5% over your base salary (no tax ceiling is applied), and employees contribute 2.5% of their base salary
- general: Pension fund- SentinelOne contributes to your pension fund according to local law. Pension contribution may vary based on the selected plan.
- general: RSUs- 4 years vesting with 1-year cliff and then quarterly.
- general: Annual bonus (depending on the performance of the company) paid out in 2 cycles
- general: Employee Stock Purchase Plan- The plan enables employees to purchase SentinelOne stocks at discounted prices vs. market value. (the plan is subject to local taxation)
- general: Company time off and holidays
- general: Private medical insurance
- general: Meal allowance
- general: Home office allowance
- general: Hybrid work model- The possibility of working both from the office and working from home
- general: Parental Leave - Embracing a new child into the family is a unique moment for everyone! In support of that, we offer 20 weeks of fully paid leave for the birth parent and 12 weeks of paid leave for the non-birth parent
- general: Employee Assistance Program- Psychological sessions with certified therapists to help you overcome stress, personal and professional challenges
- general: Free Parking in our office building
- general: Music Room fully equipped room
- general: Wellness- workout sessions and a wellness app
Tags & Categories
Answer 10 quick questions to check your fit for Senior Manager, Linux & Cloud Detection Engineering @ Sentinel Labs.