About This Role
This specialist role at Accenture is for an expert in Endpoint Security, EDR/XDR, and incident response. You will administer and optimize endpoint protection using SentinelOne, enhancing the detection, investigation, and response to threats.
Responsibilities
- Administer the SentinelOne Singularity console, tenants, sites, groups, agents, and policies
- Monitor alerts, investigate threats, and execute containment, isolation, kill, quarantine, remediation, and rollback actions according to established procedures
- Manage the deployment, update, health, and coverage of agents on Windows, Linux, and macOS
- Analyze exclusions and false positives, evaluating their impact and documenting exceptions
- Integrate SentinelOne telemetry with SIEM/SOAR solutions
- Collaborate with Threat Hunting, Incident Response, and Vulnerability Management teams
- Generate reports on coverage, detections, trends, and operational compliance
- Coordinate investigations and incidents with SOC, infrastructure, and support teams
Requirements
- 4+ years of experience in Endpoint Security, SOC, Incident Response, or related areas
- Hands-on experience with SentinelOne Singularity or equivalent EDR/XDR platforms
- Solid knowledge of security in Windows and Linux, malware, process behavior, persistence, and incident response
- Experience investigating alerts and executing containment and remediation actions
- Ability to document investigations and coordinate incidents with technical teams
- Operational autonomy and good judgment to escalate incidents according to their criticality
Nice to have:
- SentinelOne certification or specific training on the platform
- Experience with SIEM/SOAR, scripting, Threat Hunting, and MITRE ATT&CK
- Experience in mass endpoint administration
- Knowledge of IAM/PAM and Cloud Workload Security
Important Details
- Role: SentinelOne Security Specialist
- Specialty: Cybersecurity / Endpoint Security / EDR