At SentinelOne, we’re redefining cybersecurity by pushing the limits of what’s possible—leveraging AI-powered, data-driven innovation to stay ahead of tomorrow’s threats.
From building industry-leading products to cultivating an exceptional company culture, our core values guide everything we do. We’re looking for passionate individuals who thrive in collaborative environments and are eager to drive impact. If you’re excited about solving complex challenges in bold, innovative ways, we’d love to connect with you.
What are we looking for?
We are seeking a technically curious and proactive Solution Architect Intern to join our team in supporting the evolution of SentinelOne’s AI-powered SIEM platform. This role is ideal for someone interested in security analytics, product integrations, and real-world AI-driven security use cases. You’ll work with senior solution architects and product teams to help shape scalable and extensible integrations with third-party tools, APIs, and marketplaces.
What will you do?
- Assist in designing and prototyping integrations for the SentinelOne AI SIEM platform with external tools (e.g., SOAR, ticketing, threat intel, cloud logs).
- Write and maintain Python-based scripts and SDKs to support custom data ingestion, automation, and enrichment use cases.
- Support marketplace integration testing and documentation for third-party applications.
- Help build and visualize architecture diagrams, flowcharts, and integration schemas.
- Collaborate with cross-functional teams (engineering, product, and customer success) to validate technical use cases.
- Participate in proof-of-concept (PoC) activities and testbed environments for integration deployments.
- Document use cases, API references, data models, and integration patterns in collaboration with the technical writing team.
- Research competitive SIEM solutions and develop feature-comparison insights around extensibility and ecosystem fit.
What skills and knowledge should you bring?
- Pursuing or recently completed a degree in Computer Science, Cybersecurity, IT, or related field.
- Strong hands-on knowledge of Python with experience in scripting, REST API calls, and JSON parsing.
- Foundational understanding of SIEMs, cybersecurity telemetry, and log ingestion pipelines.
- Exposure to cloud platforms (AWS, Azure, GCP) and log formats like Syslog, CloudTrail, etc.
- Familiarity with DevOps tooling, CI/CD pipelines, and containerized environments (Docker/Kubernetes) is a plus.
- Experience using diagramming tools (e.g., Lucidchart, Draw.io, or Visio) to visualize architectures.
- Excellent communication, documentation, and problem-solving skills.
- Bonus: Familiarity with marketplace ecosystems (like Splunkbase, S1 Singularity Marketplace, or Salesforce AppExchange).
Why us?
Our global internship program trains the next-generation of cybersecurity talent across a range of specializations, from threat intelligence to information security, engineering and marketing. Interns can learn about the network security industry from leading thinkers, grow their professional networks, and be part of a career-defining experience including:
- 1:1 mentorship
- The opportunity to expand your knowledge and work on challenging projects
- Training and Development opportunities
- Connections to other recent grads, and employees across the company
- Leadership speaker series where you can learn about other areas of the business and ask questions to the senior leadership team and industry experts
- Fun events!
SentinelOne is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.
SentinelOne participates in the E-Verify Program for all U.S. based roles.
Similar Jobs
What We Do
SentinelOne is a leading provider of autonomous security solutions for endpoint, cloud, and identity environments. Founded in 2013 by a team of cybersecurity and defense experts, SentinelOne revolutionized endpoint protection with a new, AI-powered approach. Our platform unifies prevention, detection, response, remediation, and forensics in a single, easy-to-use solution.
Our endpoint security product is designed to protect your organization's endpoints from known and unknown threats, including malware, ransomware, and APTs. It uses artificial intelligence to continuously learn and adapt to new threats, providing real-time protection and automated response capabilities.
SentinelOne's approach to security is designed to help organizations secure their assets with speed and simplicity. We provide the ability to detect malicious behavior across multiple vectors, rapidly eliminate threats with fully-automated integrated response, and adapt their defenses against the most advanced cyberattacks.
We are recognized by Gartner in the Endpoint Protection Magic Quadrant as a Leader and have enterprise customers worldwide. Our customers include some of the world's largest companies in various industries such as finance, healthcare, government, and more.
At SentinelOne, we understand that cybersecurity is a constantly evolving field and that the threats facing organizations are becoming increasingly sophisticated. That's why we are committed to staying at the forefront of technology and innovation and providing our customers with the best protection against cyber threats.
We offer our customers a wide range of services, including threat hunting, incident response, and incident management. Our team of experts is available to assist you 24/7 and can help you respond to and manage cyber incidents quickly and effectively.
To learn more about our products and services, please visit our website at www.sentinelone.com or contact us to schedule a demo
Gallery
