Senior Security Engineer – XDR and Automation

Cyber Trust Massachusetts is a non-profit committed to growing and diversifying the cyber workforce, creating new and innovative opportunities for education and employment, and hardening the security posture of under-resourced local entities.

Cyber Trust enhances cyber education programs with hands-on, experiential learning, both through our state-of-the-art cyber range and by placing students in a live security operations center (SOC) that serves local governments, nonprofits and small businesses. Cyber Trust SOC provides local governments with Advisory and Operational cybersecurity services, with student interns serving in key delivery roles. Advisory services include cyber assessments and scanning, program planning, and policy development.

Operational services include real-time monitoring and response delivered from our four SOC locations across the Commonwealth.

Cyber Trust Massachusetts is a non-profit committed to growing and diversifying the cyber workforce, creating new and innovative opportunities for education and employment, and hardening the security posture of under-resourced local entities.

Cyber Trust enhances cyber education programs with hands-on, experiential learning, both through our state-of-the-art cyber range and by placing students in a live security operations center (SOC) that serves local governments, nonprofits and small businesses. Cyber Trust SOC provides local governments with Advisory and Operational cybersecurity services, with student interns serving in key delivery roles. Advisory services include cyber assessments and scanning, program planning, and policy development.

Operational services include real-time monitoring and response delivered from our four SOC locations across the Commonwealth.

We are seeking an experienced and highly skilled Senior Security Engineer to join our Security Operations team. This role is central to the administration, optimization, and expansion of our Sentinel One EDR/XDR platform across a diverse multi-tenant client environment. The ideal candidate brings hands-on, recent Sentinel One expertise — including Hyper-automation, XDR integrations, and API-driven workflows — and thrives in a fast-paced MSSP setting where precision, automation, and cross-platform visibility are paramount.

This is a hybrid position requiring in-state residency (Massachusetts) and the ability to be on-site at least one day per week.

• Serve as a primary technical owner for the Sentinel One EDR and XDR platform across all managed client environments
• Manage multi-tenant console configurations, policies, agent deployments, and platform health across municipal and institutional clients
• Monitor platform performance, conduct tuning, and implement changes to reduce noise while improving detection fidelity

• Design, build, and maintain XDR integrations with third-party data sources via API, including Microsoft Entra  / Microsoft 365, Google Workspace (GWS), and other security telemetry sources in a multi-tenancy environment
• Evaluate new integration opportunities to strengthen cross-platform detection and response capabilities

• Create, maintain, and optimize Sentinel One Hyper-automation playbooks to automate response actions, alert enrichment, and workflow orchestration
• Translate repeatable analyst workflows into scalable automated processes that improve MTTR and reduce manual effort across the SOC team
• Continuously review and refine automation logic based on evolving threat patterns and client environment changes

• Develop and maintain custom log parsers to normalize and structure telemetry…