SentinelOne

Professional Services Architect (AI SIEM & Hyperautomation)

SentinelOne
Apply
3 days ago
Brno, CzechiaSenior

Responsibilities

  • Serve as the internal, customer-facing, and partner-facing expert on SentinelOne AI SIEM and Hyperautomation architecture, integrations, use cases, and deployment models.
  • Conduct technical discovery and requirements analysis, and contribute to solution architecture and implementation approaches.
  • Support pre-sales and post-sales activities including scoping, architecture design, RFP responses, SOW development, and technical deep dives.
  • Guide strategic delivery partners through onboarding projects and joint customer engagements, including implementation escalation support.
  • Provide advisory services on risk mitigation, compliance alignment, and solution optimization.
  • Define repeatable onboarding and delivery methodologies, including standardized frameworks, playbooks, checklists, and implementation quality standards.
  • Create partner delivery packages, implementation references, troubleshooting guides, learning-path content, and certification-readiness materials.
  • Host partner Q&A sessions, provide implementation training, and help partner engineers achieve delivery independence.
  • Drive service-delivery improvements through post-engagement reviews, lessons learned, and collaboration with Professional Services leadership and consultants.

Requirements

  • At least 5 years of enterprise cybersecurity experience, including meaningful customer-facing work in Professional Services, technical consulting, solution engineering, or security architecture.
  • Deep hands-on experience with SIEM platforms and security data ingestion pipelines, including complex SIEM or SOAR migrations and architecture decisions at meaningful scale.
  • Preferred experience architecting large-scale SIEM data platforms, such as Splunk, for at least 3 years.
  • Experience with SOAR or security automation, workflow design, scripting or programming languages, REST APIs, JSON, database data extraction, and automated software workflows.
  • Familiarity with logging pipelines, OCSF or ECS normalization schemas, third-party integrations, log-shipping agents, and SIEM enrichment strategies.
  • Experience with EDR/XDR technologies and the interconnection of endpoint, identity, cloud, and SIEM products.
  • Experience scoping Professional Services engagements, estimating effort, assessing risks and dependencies, and contributing to SOWs for multi-technology projects.
  • Experience working with cybersecurity channel partners such as MSSPs, system integrators, or value-added resellers in delivery or technical advisory roles.
  • Strong communication skills for explaining complex technical topics to technical teams and business stakeholders, plus experience with mentorship, thought leadership, delivery methodology, or service innovation.
  • Relevant security certifications such as CISSP, CCSP, AWS Certified Security - Specialty, or equivalent are valued.
  • Experience at a cybersecurity vendor, Professional Services practice, MSSP, system integrator, or enterprise security team is preferred; SentinelOne platform experience or comparable enterprise SIEM and XDR experience is advantageous.

Benefits

  • Restricted Stock Units, an Employee Stock Purchase Plan, and a performance-based bonus.
  • Flexible time off in addition to standard 5 weeks of PTO, paid wellness days, fully paid short-term sick/nursing leave, and gender-neutral parental leave.
  • Private medical care, life and disability insurance, pension insurance contributions, global business travel medical insurance, and an Employee Assistance Program.
  • Global home office allowance, meal allowance, wellbeing allowance, MultiSport benefit program, and Wellness Coach app.
  • Hybrid work in Prague or Brno, or remote work in Czechia/Slovakia; Prague-based employees must work from the office at least 2 days per week.

Tech Stack

AWSLuaPythonSplunk

Categories

Solutions Engineering
SentinelOne

About SentinelOne

10,000+ employees

SentinelOne builds an AI-driven cybersecurity platform that provides endpoint protection, detection and response, XDR, cloud, and identity security for enterprises. Its Singularity platform is sold as subscription software and managed services to secure laptops, servers, containers, and cloud workloads with automated detection and remediation. Founded in 2013 and headquartered in Mountain View, California, SentinelOne is a public company listed on the NYSE following its 2021 IPO.

Contact me