SentinelOne Cuts 8 Percent of Its Workforce in 2026 and What It Means for Cybersecurity Jobs

SentinelOne, one of the most closely watched names in cybersecurity, is cutting roughly 8 percent of its workforce in 2026 even as its revenue keeps climbing. As CNBC reported on May 29, the endpoint-security company paired its first-quarter results with a restructuring plan and a softer-than-hoped forecast, a combination that sent its stock sliding. With around 2,900 full-time employees heading into the year, an 8 percent reduction translates to roughly 230 roles. At Metaintro, we track every job-market shift like this one so you know what it signals and where to move next.

The headline that rattled investors was not a collapse in sales. It was the gap between a company that is still growing fast and one that has decided to spend less to get there. That tension is the real story for anyone working in security today.

The core question SentinelOne forced into the open is whether a profitable, fast-growing cybersecurity vendor can still justify trimming staff. The answer, increasingly, is yes, and that has direct consequences for how security professionals plan their next move.

So what actually happened, what does an 8 percent cut mean inside a company that just posted record recurring revenue, and how should cybersecurity and tech workers read this moment? Let us walk through it.

What exactly did SentinelOne announce?

SentinelOne announced its results for the first quarter of fiscal 2027, the three-month period that ended April 30, 2026, and at the same time disclosed a restructuring plan. According to the company's own filing with the U.S. Securities and Exchange Commission, the plan includes a reduction of approximately 8 percent of its full-time employees. SentinelOne said it expects a one-time charge of roughly 25 million dollars tied to the restructuring, of which about 15 million dollars represents cash-based expenditures such as severance and related benefits. The company expects the plan to be substantially completed during the second quarter of fiscal 2027.

The financials underneath the cut were not weak in absolute terms. Revenue rose 21 percent year over year to 276.7 million dollars. Annual recurring revenue reached 1.163 billion dollars, up 23 percent, and net new recurring revenue grew 55 percent. The number of customers contributing more than 100000 dollars in annual recurring revenue climbed 17 percent to 1702. On a non-GAAP basis the company reported net income of 12.3 million dollars, or 4 cents per diluted share, a swing toward profitability that management framed as progress.

So why the alarm? Two things. First, the 276.7 million dollar revenue figure narrowly missed the roughly 277.3 million dollars analysts had penciled in. Second, the forward guidance disappointed. As Reuters reported through The Star, SentinelOne guided second-quarter revenue to between 289 million and 291 million dollars, below the roughly 292 million dollars Wall Street expected. A small top-line miss plus a cautious outlook plus a layoff announcement proved to be a potent mix, and investors reacted accordingly. Shares fell about 17 percent in extended trading.

Why does a growing company cut 8 percent of staff?

This is the part that confuses a lot of people, and it is the most important thing for job seekers to understand. SentinelOne is not shrinking because demand for cybersecurity is fading. Demand is rising. The company is reshaping itself to spend its money differently.

In its own language, SentinelOne framed the restructuring as a way to streamline operations and concentrate investment on its highest-growth priorities, which it identified as AI, data, cloud, and endpoint. In other words, the company is reallocating. Roles tied to slower-growth or more mature parts of the business are being trimmed so the budget can be redirected toward areas the company believes will compound faster. The 25 million dollar charge is the cost of making that pivot quickly rather than waiting for natural attrition.

This pattern has become the defining feature of the 2026 tech-employment landscape. Companies are not cutting because they are failing. They are cutting because capital markets now reward disciplined margins as much as raw growth, and because AI is changing which roles create the most leverage. We unpacked the broader version of this shift in our look at why AI does not have to mean layoffs for your job, and the SentinelOne move is a textbook case of a company using a restructuring to fund an AI-forward strategy rather than to retreat from one.

It also helps to separate the GAAP and non-GAAP pictures. On a GAAP basis SentinelOne reported a net loss of 76.2 million dollars for the quarter, weighed down heavily by stock-based compensation and other non-cash items. On a non-GAAP basis it reported a profit. Both numbers are true. The gap is exactly why a company can look like it is thriving and still feel pressure to tighten its cost base. Understanding that distinction is genuinely useful when you are evaluating an employer, because a company can be growing revenue, posting an accounting loss, and trimming headcount all at once without any of those facts contradicting the others.

There is also a margin story hiding in the numbers that matters for how durable these cuts are likely to be. SentinelOne's GAAP gross margin slipped to 72 percent from 75 percent a year earlier, and its non-GAAP gross margin eased to 77 percent from 79 percent. Those are still strong figures by any software standard, but the direction of travel is what management cares about. When a company sees gross margin drift down even slightly while it is pouring money into compute-heavy AI features, the pressure to claw back efficiency somewhere else becomes intense. Headcount is the lever most companies reach for first, because it is the fastest way to protect operating margin without slowing the product roadmap. That is the quiet logic behind a restructuring at a business that is, by every growth metric, still winning.

Is this part of a bigger cybersecurity slowdown?

Short answer, no. Cybersecurity remains one of the structurally strongest corners of the technology labor market. Threats are not slowing down, regulatory pressure on data protection keeps rising, and AI has arguably widened the attack surface rather than shrinking it. SentinelOne itself reported record net new recurring revenue, which is the opposite of a demand problem.

What is happening is a maturation of the sector. The earliest stage of the security boom rewarded headcount-heavy growth. The current stage rewards efficiency, automation, and the ability to deliver more protection per dollar. That means the kinds of security roles in highest demand are shifting. Generalist and routine roles face more pressure, while specialized skills in cloud security, AI-driven threat detection, security data engineering, and automation are in clear ascendancy. SentinelOne naming AI, data, cloud, and endpoint as its investment priorities is effectively a public map of where it wants its talent concentrated.

If you work in or near security, that map is a gift. It tells you which skills the company believes will still be funded after the dust settles. We have written before about how the 2026 tech layoff wave ends and how workers can thrive, and the recurring lesson is the same. The roles that survive restructurings are the ones positioned closest to where the company is putting fresh money, not the ones simply doing what worked two years ago.

It is also worth keeping a clear head about the macro narrative. There is a tendency to read every tech layoff as proof that AI is hollowing out entire careers. The evidence is more nuanced than the panic suggests, as we explored in our reality check on the 2026 AI jobs panic. The likelier truth, captured in our piece on the AI workforce skills mismatch, is that the problem is less about jobs disappearing and more about a gap between the skills companies now want and the skills the existing workforce was hired for.

How should affected cybersecurity workers respond?

If you are one of the roughly 230 people affected, or you fear you might be in a future round, the first thing to know is that being cut from a profitable, growing company carries no stigma. A restructuring at a firm posting 23 percent recurring-revenue growth is a portfolio decision, not a verdict on your performance. Say that clearly in interviews and you will neutralize the most common worry hiring managers have.

Practically, here is the sequence that tends to work. First, secure the logistics. Confirm your severance terms, your final equity vesting dates, and the deadline to exercise any stock options, because that window can be short and expensive to miss. Second, translate your experience into the language of the growth areas SentinelOne and its peers are funding. If you have touched cloud workloads, AI-assisted detection, automation pipelines, or security data tooling, lead with that. Those are the phrases that move resumes to the top of the pile right now.

Third, treat your resume as a targeting instrument rather than a history log. Quantify outcomes, such as incidents resolved, mean time to detection reduced, or systems hardened, because security hiring rewards measurable impact. Our guides on how to make your resume beat AI screening and on the broader hidden AI threat of career deskilling are useful here, because the same automated filters that read your resume are the ones reshaping the jobs you are applying for.

Fourth, be alert to a market quirk that hits laid-off workers hardest. The volume of postings can look healthier than the real demand, because a meaningful share of listings are stale or speculative. We covered how to spot these in our breakdown of ghost jobs in the 2026 hiring market. Prioritize roles where a company is clearly funding a specific initiative over generic postings that may never convert.

Finally, consider whether a credential closes a gap on your resume. The fastest-funded security roles increasingly assume cloud and AI fluency, and a targeted certification can be the difference between screening through and screening out. We laid out the economics in our look at how AI certifications boost salary and career growth in 2026.

A timing note is worth adding here too. SentinelOne expects the bulk of these cuts to be completed during its second fiscal quarter, which means the affected workers will hit the market in a fairly tight window rather than trickling out over many months. That concentration can cut both ways. On one hand, a cluster of skilled security professionals becoming available at once can briefly raise competition for the most obvious roles. On the other hand, recruiters and hiring teams in the security space watch announcements like this closely, and a well-known restructuring often prompts proactive outreach to displaced talent. The workers who move first, with a sharpened resume and a clear story about the funded skills they bring, tend to clear the window before it gets crowded. Speed and specificity beat waiting for the perfect listing.

What does this signal for the rest of tech?

SentinelOne is not an outlier. It is an early, clean example of a model spreading across software. The companies executing it share a profile. They are growing, they are pivoting hard toward AI and cloud, and they are willing to absorb a one-time restructuring charge to get their cost base aligned with that pivot faster. We have seen close variations at firms reshaping around AI rather than retreating, including the moves we tracked in Cloudflare's 2026 restructuring and the Intuit job cuts and the tech-layoff playbook.

For workers, the strategic takeaway is to stop reading layoffs purely as a sign of corporate weakness and start reading them as a signal of where money is being moved. When a company tells you it is investing in AI, data, cloud, and endpoint while trimming elsewhere, it is publishing its hiring priorities for the next two years. The smart response is to position yourself on the funded side of that line. That is true whether you are inside SentinelOne, adjacent to it in the security sector, or working anywhere in tech where the same margin-and-AI logic is taking hold. The job market is not getting smaller. It is getting more specific about what it will pay for, and the people who read that signal early are the ones who land on their feet.

Related Articles

• How the 2026 tech layoff wave ends and how workers can thrive
• Cloudflare cuts 20 percent of staff in 2026 AI restructuring
• Intuit 3000 job cuts and the 2026 tech-layoff playbook
• Wix cuts 20 percent of its workforce in 2026 AI restructuring
• Why AI does not have to mean layoffs for your job
• A reality check on the 2026 AI jobs panic
• The AI workforce skills mismatch is not a job apocalypse
• The hidden AI threat to career security is deskilling
• Ghost jobs are breaking the 2026 hiring market and how to spot them
• AI certifications boost salary and career growth in 2026
• How to write a resume that beats AI screening in 2026
• US Jobless Claims Tick Up as Layoffs Stay Near Historic Lows in 2026
• The Software Engineer Title Is Fading as AI Creates More Jobs

People Also Asked

Q: How many employees is SentinelOne laying off in 2026?

A: SentinelOne is cutting approximately 8 percent of its full-time workforce. With around 2,900 full-time employees, that works out to roughly 230 roles. The company expects to substantially complete the reduction during the second quarter of its fiscal 2027 and to record a one-time charge of about 25 million dollars, including roughly 15 million dollars in cash costs.

Q: Why is SentinelOne cutting jobs if revenue is growing?

A: Revenue rose 21 percent year over year to 276.7 million dollars, so the cuts are not about falling demand. SentinelOne said it is streamlining operations to redirect investment toward AI, data, cloud, and endpoint security. The move reflects a broader 2026 trend where profitable software companies reshape their cost base to fund AI priorities rather than respond to a downturn.

Q: What does the SentinelOne layoff mean for cybersecurity job seekers?

A: Cybersecurity demand remains strong, so the bigger signal is which skills are being funded. Roles tied to cloud security, AI-driven detection, automation, and security data engineering are in highest demand. Workers should sharpen resumes around measurable outcomes, target roles tied to specific funded initiatives, and consider certifications that close cloud or AI skill gaps.

Looking for your next opportunity in cybersecurity or tech? A restructuring at a growing company is a portfolio decision, not a verdict on you. Metaintro tracks the layoffs, the hiring, and the skills employers are actually funding, then points you toward roles that fit. Sign up and put the next move in your hands.