Principal AI Platform Engineer – Lead Architect

SentinelOne has expanded its partnership with Lenovo to add AI security to Lenovo's ThinkShield security portfolio. The company announced the deal on October 21, 2026. The move builds on their existing work on endpoint detection and response. It adds visibility into, and governance over, AI agents and AI use on ThinkShield endpoints through SentinelOne Prompt Security. Security teams can identify which AI services staff use, including unsanctioned "shadow AI," and block sensitive data from reaching unauthorised AI applications. They can also apply governance policies in real time. Lenovo's Security Services team will offer expert support alongside the tool.

SentinelOne launches Singularity Agentic Detection and Response to stop rogue and malicious AI agents at machine speed. New offering takes AI agent security from discovery and governance to runtime detection and response, so security teams can see every agent, control what it can do, and stop it the moment it goes off course Published on 10/21/2026 at 09:09 am EDT Business Wire SentinelOne(R)(NYSE: S), the AI Security leader, today unveiled Singularity(TM) Agentic Detection and Response (ADR), a new offering that discovers AI agents, enforces what agents are allowed to do, monitors agent behavior in depth, and detects and stops unintended and malicious activity in real time. Bringing together visibility and governance of agent activity with SentinelOne's signature runtime behavioral prevention, detection and response, the new offering is built directly on the Singularity Platform, giving new and existing customers a battle-tested foundation to secure AI running on endpoints, cloud workloads, and the broader enterprise. Singularity ADR is the newest addition to SentinelOne's AI Security portfolio and a direct expansion of the company's commitment to defend the surfaces AI runs on. Singularity ADR is being introduced today at OneCon 2026, SentinelOne's global customer conference, and is immediately available in early access. Securing the Agents that Power the AI Enterprise AI agents already hold real credentials, chain tool calls, and work independently across the modern enterprise, and with Claude Code and Cowork, Codex, as well as other tools, every employee is now an agent manager. As recent high profile events have shown, the risk AI agents now carry is as likely to come from a sanctioned agent going off course as from an attacker. SentinelOne already protects the endpoint, identity, mobile, and cloud workloads where these agents run. Singularity ADR builds on that proven defense by focusing on agentic behavior and actions in runtime. The new Singularity ADR benefits from the capabilities of SentinelOne's fast growing product lines, SentinelOne Prompt Security and Purple, along with the modern endpoint, cloud workload and identity security capabilities already in use by over 15,000 SentinelOne customers and partners worldwide. It governs which AI agents are allowed to run and what they can reach, and blocks known-bad actions at the moment of interaction. Anything that gets past policy is judged by the same behavioral detections the Singularity Platform already runs on those surfaces, so an agent acting outside its intent is caught and stopped like any other threat. From Agent Governance to Runtime Protection In March, SentinelOne bolstered its AI security portfolio with the introduction of Prompt AI Agent Security to discover AI agents and govern how they connect to tools and data. Singularity ADR builds on that foundation and takes agent security to the next level, pairing agent governance with the behavioral detection and response SentinelOne runs on endpoints, cloud workloads and identities, and ties every agent action to its origin. Security teams now get one view of what an agent was asked to do and what it actually did on the system, and they can stop a single agent mid-action without halting the rest of the workflow. What Singularity ADR Delivers * Agent and MCP inventory. Every agent, tool, skill, connector, and MCP server across endpoints, SaaS, and cloud providers, sanctioned or not, with the permissions each holds and the employees behind it. Security teams know exactly what agents exist before deciding what to allow. * Multi-platform agent coverage. Goes beyond the MCP gateway into Salesforce Agentforce, Microsoft Copilot Studio, OpenAI ChatGPT workspace agents, and Anthropic Claude managed agents. Coverage follows agents wherever the business builds them. * Agent Traces. Every agentic event is monitored and sent to Singularity Data Lake so it can be visualized, retained, searched, and used in dashboards or detection rules. * Unified Storyline. ADR event behavior is integrated with traditional EDR behavior in one execution graph, showing which AI components led to a process before it ran: the user request, the AI assistant, the MCP server that supplied the tool, and the file or process that followed. Analysts see the full chain in one place instead of piecing it together manually. * Policy and execution governance. Allow and block controls for which agents run, who uses them, and what they can reach, with approval workflows for high-risk tools. * In-line prevention. Blocks prompt injection, jailbreaks, credential exfiltration, and tool poisoning before the action executes. * Intent drift detection. Flags the gap between what an agent was asked to do and what it did, so analysts stop reconstructing events by hand. * Agent containment. Stops one agent mid-action while the rest of the workflow keeps running. * Agentic Investigation and governed response. Automatically completes an investigation and executes a response within the boundaries set by customers. "Securing AI agents goes beyond just stopping threat actors with malicious intent. As we've seen all too frequently, an equal if not more prominent risk comes from unintended behavior of sanctioned agents," said Chris Corde, Chief Product Officer of SentinelOne. "By bringing to bear SentinelOne's AI-based behavioral prevention, detection and response capabilities, we can stop rogue agentic actions using the same platform our customers already use and trust to protect their core attack surfaces." "AI Security has to cover everything AI touches: the surfaces it runs on, the models behind it, and now the agents acting on its behalf," said Tomer Weingarten, co-founder and CEO of SentinelOne. "Agents hold real credentials and act without waiting for anyone. Singularity ADR brings the runtime protection that already defends tens of millions of endpoints, workloads and identities to the agents doing real work inside the enterprise, so our customers can adopt AI at full speed." About SentinelOne SentinelOne (NYSE: S) is the leader in AI security, setting the standard for using AI and automation to give defenders a decisive operating advantage. Built for those who secure our world, its platform delivers unified coverage across endpoints, identity, cloud, and AI. Powered by Autonomous Security Intelligence, SentinelOne stops attacks at machine speed, reducing risk and delivering clarity and control to stay one step ahead. Headquartered in Mountain View, California, with teams worldwide, SentinelOne protects nearly one-fifth of the Fortune 500 and hundreds of Global 2000 enterprises. From Main Street to Wall Street, the world's most critical organizations trust SentinelOne with their security. Third-Party Disclaimer All third-party product names, logos, and brands mentioned in this publication are the property of their respective owners and are for identification purposes only. Use of these names, logos, and brands does not imply affiliation, endorsement, sponsorship, or association with the third party. Forward-Looking Statements This press release includes forward-looking statements. Forward-looking statements are subject to risks and uncertainties, including factors beyond our control, that could cause actual performance or results to differ materially from those expressed in or suggested by the forward-looking statements. These and other risk factors are described in the "Risk Factors" section of our most recent Annual Report on Form 10-K, subsequent quarterly reports filed on Form 10-Q, and other filings made with the U.S. Securities and Exchange Commission (SEC), which are available free of charge on our website at http://investors.SentinelOne.com and on the SEC's website at www.sec.gov. You are cautioned not to place undue reliance on these forward-looking statements. Any future products, functionality and services may be abandoned or delayed, and as such, you should make decisions to purchase products and services based on features that are currently available. Any forward-looking statements made in this document are based on our beliefs and assumptions that we believe to be reasonable as of the date hereof. You should not rely upon forward-looking statements as predictions of future events. Except to the extent required by law, we undertake no obligation to update these forward-looking statements to reflect new information or future events. View source version on businesswire.com: https://www.businesswire.com/news/home/20261021985882/en/ (C) Business Wire - 2026

Moro Hub brings sovereign AI Security to UAE businesses through SentinelOne partnership. Moro Hub is betting that the fastest way for the UAE to adopt artificial intelligence is to make sure it can be trusted first. Moro Hub, formally Data Hub Integrated Solutions and a subsidiary of Digital DEWA, the digital arm of the Dubai Electricity and Water Authority (DEWA), has signed a strategic partnership with SentinelOne, the AI security leader. The agreement will let organizations across the country run a dedicated AI security platform inside the UAE's borders. Moro Hub and SentinelOne announced the partnership during the 28th edition of WETEX 2026 at Dubai World Trade Centre. The timing reflects a shift in how companies think about risk. Businesses are rolling out generative AI, autonomous agents and AI-enabled applications faster than most security teams can map them. That creates a new class of exposure, including leaked data, manipulated prompts and employees using AI tools that nobody in IT has approved. The old playbook, which treats security as a gate at the end of a project, was not built for software that learns, acts and changes on its own. SentinelOne's AI Security platform is designed for that environment. It helps organizations discover and govern how AI is used, protects AI applications and agents while they run, and detects and responds to threats at machine speed. Through the partnership, Moro Hub adds those capabilities to its growing cybersecurity portfolio. The more interesting part of the deal is where the platform will live. Moro Hub will offer it as a sovereign on-premise solution or hosted within its own data centers, so organizations with strict regulatory requirements can keep their security telemetry and AI data in the country. Customers who prefer not to run it themselves can choose a managed service, in which Moro Hub's specialists deploy, operate and monitor the platform on their behalf. That choice matters in a market where regulated industries have often had to pick between capability and control. Banks, government entities and utilities want the benefits of AI, but they also answer to rules about where sensitive information can sit and who can see it. A sovereign option removes much of that tension. "Securing AI is quickly becoming a core requirement for organisations in the UAE. Through this partnership, we can offer customers the choice of a sovereign deployment that keeps their data in the country, or a managed service operated by our own specialists, so that every organisation can adopt AI with confidence within a secure and resilient environment," said Mohammed Bin Sulaiman, CEO of Moro Hub. His comments point to a broader idea. Confidence is what moves AI projects from pilot to production, and it tends to come from knowing that someone is watching the systems around the models, not only the models themselves. Customers can deploy the platform on premise, host it in Moro Hub data centers, or consume it as a managed service. For Moro Hub, the partnership fits a clear strategy. The company has been widening its cybersecurity ecosystem and strengthening the range of sovereign and managed security services available to UAE organizations. Adding AI-specific protection extends that approach to the technology most likely to define the next decade of enterprise computing. "The collaboration with SentinelOne strengthens our ability to deliver integrated solutions that support data security and digital infrastructure, and helps our customers build more proactive security capable of keeping pace with the accelerating speed of cyberattacks and AI-driven threats," he added. SentinelOne sees the arrangement as part of a longer commitment to the region. "Expanding our partnership with Moro Hub reflects SentinelOne's long-term commitment to the UAE and the wider region. As organisations across the Emirates accelerate their investment in AI, they need security that is built into that transformation, not bolted on after the fact. Through Moro Hub, customers can run the SentinelOne AI Security platform as a sovereign deployment in the UAE or consume it as a managed service, giving them a stronger foundation to secure their AI investments and respond to threats at machine speed," said Girard Moussa, AVP for META Region, at SentinelOne. The phrase "built in, not bolted on" is the thesis of the whole deal. As AI becomes part of everyday operations, security stops being a separate purchase and becomes part of the foundation. WETEX, organized by DEWA and held from October 20 to 22, 2026, is a fitting stage for that message. The exhibition brings together institutions, companies, business leaders and specialists to review new solutions in energy, water, sustainability, digital transformation and artificial intelligence. A partnership that joins a utility-backed data center operator with a global AI security company belongs in that conversation. The practical result is straightforward. UAE organizations that have waited for a trusted, locally controlled way to secure their AI investments now have one, and the country's AI ambitions have a sturdier base to build on.