Senior Cybersecurity – Endpoint Security (SentinelOne) and Infrastructure Security

Job description

Role – Senior Cybersecurity – Endpoint Security and Infrastructure Security (SentinelOne, Proofpoint, Guardicore, VPN and DLP security solutions)

About the Company

Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future-you’ll create it About the Role: Our team is seeking an experienced technologist to join our Cybersecurity team.

Working as a Senior Cybersecurity within CSO, you will work with application owners, business partners, and other CSO teams; to design, implement, and maintain AT&T endpoint and infrastructure security strategy. Focusing on protecting endpoints from threats (E.g. phishing, malware, data breaches) enact new security standards, and research emerging standards and protocols. The role involves creating, maintaining and enforcing robust endpoint security policies that align with AT&T's business needs and security best practices.

Roles & Responsibilities

The Individual in this role will Architect and Lead SentinelOne Deployments: Design and implement SentinelOne, Proofpoint, Guardicore, VPN and DLP security solutions for a wide range of infrastructure and endpoints, ensuring scalable, resilient, and effective protection across: Multiple Linux distributions (RHEL, Ubuntu, CentOS, etc.) Windows Server (various versions) Windows and MacOS endpoints Virtual desktop infrastructure (HVDs) Kubernetes clusters running on-prem and in cloud environments Integration & Automation: Integrate with other security solutions and automation using APIs.

Security Policy Management

Define, optimize, and enforce SentinelOne, Proofpoint, Guardicore, VPN and DLP security policies for different operating systems and device types, balancing security posture with operational requirements.

Threat Detection & Incident Response

Collaborate with SOC and IR teams to tune SentinelOne, Proofpoint, Guardicore, VPN and DLP detections. Assist in the response to threats and the investigation of security incidents across the environment.

Cross-Platform Expertise

Provide deep technical expertise in handling endpoint security for heterogeneous systems, troubleshooting compatibility issues, and optimizing performance.

Technical Leadership & Documentation

Serve as the subject matter expert for endpoint security, producing architectural diagrams, technical documentation, runbooks, and best practices guides.

Collaboration & Training

Partner with IT, DevOps, and security teams to ensure seamless integration with existing infrastructure and provide training on SentinelOne, Proofpoint, Guardicore, VPN and DLP usage and endpoint security hygiene.

Continuous Improvement

Stay updated on emerging threats, SentinelOne, Proofpoint, Guardicore, VPN and DLP product updates, and industry best practices. Recommend enhancements to improve detection and response capabilities.

Required Skills

Minimum 10+ years in cybersecurity roles, with at least 4-6 years architecting and supporting large-scale endpoint and infrastructure protection platforms (preferably SentinelOne, Proofpoint, Guardicore, VPN and DLP).

Operating system and Infrastructure Proficiency

Experience with Linux (multiple distros), MacOS and Windows server/client administration Knowledge of Virtual desktop infrastructure (VMware, Citrix, Azure Virtual Desktop) Knowledge of Kubernetes and application deployment.

Security Frameworks

Familiarity with NIST, CIS, MITRE ATT&CK, and other security standards.

Automation and coding

PowerShell, Bash, Python; CI/CD (GitHub/GitLab/Azure DevOps); API integration skills. Experience with the Singularity platform (EPP/EDR/XDR) is preferred. Familiarity with OT/IoT discovery and segmentation; network isolation strategies for branch and edge. Certified in Engineering and Administration areas of SentinelOne, Proofpoint, Guardicore, VPN and DLP, is highly desirable. The candidate must have excellent analytical and problem-solving skills, be self-motivated and work independently Sense of urgency and attention to detail.

Should be flexible to work on weekends. Should be flexible to provide coverage in US morning hours.

Desired Skills

Familiarity with applying Artificial Intelligence (AI) or Machine Learning (ML) techniques in cybersecurity contexts (e.g., anomaly detection, threat hunting, behavioral analytics, or risk scoring). Experience leveraging AI-enabled tools (such as Copilot for Security, Darktrace, CrowdStrike Charlotte AI, or custom LLM integrations) to enhance detection, response, and automation workflows. Understanding of LLM safety, prompt engineering, or AI governance frameworks (e.g., NIST AI RMF, EU AI Act readiness) is a plus.

Exposure to data science fundamentals relevant to security (pattern recognition, supervised vs. unsupervised learning, model validation). Awareness of AI-driven risks (e.g., adversarial ML, data poisoning, model hallucination) and their mitigation within enterprise environments. Interest in leveraging GenAI for security operations, such as summarizing alerts, drafting reports, or automating incident triage.

CISSP, CISM, SANS GIAC or relevant cybersecurity

• Excellent communication skills including metrics/performance documentation/presentation, technical drawing/architecture origination and modification
• Operates well under pressure and urgent circumstances Self-reliant and diligent in follow-through for assigned tasks
• Ability to work with a geographically disperse team Engaged collaborator, contributor and team player Experience working in an environment where coordination with multiple teams is essential to success
• Ability to prioritize individual/group work in a high-stress and time-bound environment Bachelor’s / Master's degree in Information Systems, Engineering, Mathematics.

Computer Science or Cyber Security or equivalent experience. "1. Familiarity with applying Artificial Intelligence (AI) or Machine Learning (ML) techniques in cybersecurity contexts (e.g., anomaly detection, threat hunting, behavioral analytics, or risk scoring). 2. Experience leveraging AI-enabled tools (such as Copilot for Security, Darktrace, CrowdStrike Charlotte AI, or custom LLM integrations) to enhance detection, response, and automation workflows. 3.

Understanding of LLM safety, prompt engineering, or AI governance frameworks (e.g., NIST AI RMF, EU AI Act readiness) is a plus. 4. Exposure to data science fundamentals relevant to security (pattern recognition, supervised vs. unsupervised learning, model validation). 5. Awareness of AI-driven risks (e.g., adversarial ML, data poisoning, model hallucination) and their mitigation within enterprise environments. 6.

Additional Information

Location: Hyderabad / Bengaluru Weekly Hours: 40 Time Type: Regular Location: IND:AP:Hyderabad / Argus Bldg 4f & 5f, Sattva, Knowledge City- Adm: Argus Building, Sattva, Knowledge City AT&T and its subsidiaries are committed to equal employment opportunity. All hiring, promotion, and other employment decisions remain merit-based and free from discrimination on the basis of race, color, religion, religious creed, national origin, ancestry, age, sex, sexual orientation, gender, gender identity, gender expression, physical disability, mental disability, pregnancy, medical condition, genetic information, marital status, citizenship status, military status, veteran status, or any other characteristic protected by federal, state, or local laws.

In addition, AT&T will provide reasonable accommodations to qualified individuals with disabilities. AT&T is a fair chance employer and does not initiate a background check until an offer is made. Click here to learn more or request an application accommodation here .