Engineering autonomous operations.

I build applied AI and autonomous systems across domains, currently focused on agentic security operations.

My work sits at the intersection of product, engineering, advisory, and operations: discovery, building rapidly to prove fit, and translating signal into product direction.

Read signals

About

Operator depth,
builder instincts.

Carter Church is currently a Member of Technical Staff in AI Engineering at SentinelOne, reporting to the Chief AI Officer and focused on agentic systems for security operations.

Before working on AI products, Carter spent over a decade in security operations, incident response, and automation. Rooted in the SOC, his work involved monitoring, investigating, hunting, developing custom tools, mentoring analysts, and ultimately scaling security operations.

Carter's work focuses on designing and building agentic systems that can operate inside reasonable constraints. He's interested in AI that respects process, auditability, escalation, and human judgment, culminating in systems that turn security analysts into effective supervisors of meaningfully synthesized work.

Carter is heavily involved across the SentinelOne portfolio: acting as product owner for the flagship agentic SOC product, ensuring customer-zero validation via internal customers, advising on the development of all agentic capability as the team's internal cyber SME, and driving evaluations across the company's agentic offerings. He also conducts pre-release research across frontier models, designing benchmarks that measure how effectively models burn down real-world analyst effort.

At SentinelOne, Carter previously led Security Automation across the internal security organization, where he built NEON, an agentic framework for automating investigations and augmenting analysts across security and business functions. He was also a founding SOC analyst, helping scale security operations into a global follow-the-sun function.

Work

What I Work On

Product

Deciding what agentic systems should and shouldn't do, and what "working" actually means for security teams.

Engineering

Designing and building agents, harnesses, infrastructure, evals, etc.

Customer Engagement

Sitting with the teams who live in these tools, truly understanding their work, and validating what we build against it.

Advocacy

Conference presentations, speaking engagements, and consulting on applied AI across domains.

Transmissions

Talks & Recognition

Carter Church keynoting Building NEON at OneCon25, name in lights above a full house

Aug 2026SentinelOneSentinelOne Makes the Autonomous SOC Trustworthy with Governed, Closed-Loop Responserelease
What shipped here to customers (agentic investigation plus hyperautomation response with LLM actions) is our productized version of what I built for our SOC internally and presented in the Building NEON keynote a year earlier (2025), now available in our product.
Jun 2026SentinelOnePurple AI Agentic Investigation Opens to All Customersrelease
What shipped here to customers (agentic investigation) is our productized version of the investigation component that I built for our SOC internally and presented in the Building NEON keynote a year earlier (2025), now available in our product.
Dec 2025WebinarRevolutionizing Security Teams with Singularity Hyperautomationtalk
Feeling overwhelmed? A recent 451 Research Report discovered that on average, teams are unable to investigate 43% of alerts daily, battling low-fidelity signals, siloed tools, and manual processes. Join this actionable session with Carter as he walks you through how his SOC team has transformed their work processes. This is a promising new era of security operations productivity, where AI and automation converge in hyperautomation.
Nov 2025OneCon25(Keynote) Building NEON: Agentic Security at SentinelOnetalk
NEON is a SOC agent I built internally. It reasons across alerts, investigating the way a security analyst would. This means reasoning across playbooks and environmental context, generating SIEM queries, opening war rooms, and interrogating end-users. This keynote's premise was to demonstrate what the future of SOC work might look like and how the SentinelOne platform is capable of providing the building blocks necessary to build capability like this already.
Nov 2025OneCon25Architecture of the Autonomous SOCtalk
NEON is a SOC agent I built internally. It reasons across alerts, investigating the way a security analyst would. This means reasoning across playbooks and environmental context, generating SIEM queries, opening war rooms, and interrogating end-users. This presentation was an architecture review, and left attendees with exactly what steps they could take to build this class of capability themselves.
Aug 2025SentinelOneS1 Stellar Award - Top Performeraward
Awarded to top performers, with unique opportunities to attend high-profile field engagement events.
Dec 2024SentinelOneS1 Excellence Award 2024award
Awarded to select Sentinels who "made a cross-functional impact, showing an overall commitment to our core values" across an entire year - granted for efforts on the acquisition, product launch, and internal adoption of Singularity Hyperautomation.
Dec 2024WebinarA Security Analyst's Guide to Optimized SecOpstalk
Hear from a security analyst's perspective as we discuss how a truly unified SecOps platform can consolidate security functions, optimize efficiency, and reduce the burden on security teams.
Nov 2024OneCon24Streamlining SOC Operations with Hyperautomationtalk
A live look at how our various security teams at SentinelOne use Hyperautomation to accelerate security response, and a guide on how to build this capability yourself.
Nov 2024OneCon24Inside Singularity Operations Centertalk
An analyst's perspective of how SentinelOne's platform functions and specific insights on how to get the most out of the platform in your environment.