Remote Security Operations Engineer - Incident Response

LinuxCareers; Greater London; Remote; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Flexible remote model

Professional development stipend

Comprehensive health and parentalleave

Job summary

Samsara is a publicly traded IoT platform company enabling digital transformation of physical operations. This Security Operations Engineer role focuses on protecting the company's people, systems, and information through alert triage, incident investigation, and security operations improvements.

You will monitor security alerts across identity, endpoint, email, SaaS and cloud environments, own investigations to documented outcomes, and help improve runbooks and detections with the team.

Qualifications

• Experience triaging and investigating security alerts in SOC or IR.
• Experience with SIEM/EDR or email security to investigate activity.
• Understanding threats like phishing and account compromise, plus networking/OS/identity concepts.
• Ability to query logs, distinguish evidence from assumptions, escalate when needed.
• Scripting in Python or similar to support investigations.

Responsibilities

• Monitor, triage and investigate security alerts across identity, endpoint, email, SaaS and cloud.
• Own routine investigations and incidents through to documented outcomes.
• Support responders during major incidents with evidence collection and containment.
• Maintain investigation records and handovers across regions.
• Improve runbooks and tune detections; contribute scripts or automation.

Skills

SOC/IR experience

Log analysis

Scripting (Python)

Threat understanding

Incident communication

Tools

SIEM

EDR

Email security platforms

Python

Cloud platforms (AWS/GCP)

APIs/Automation platforms

Job description

Samsara is a publicly traded IoT platform company enabling digital transformation of physical operations. This Security Operations Engineer role focuses on protecting the company's people, systems, and information through alert triage, incident investigation, and security operations improvements.

You will monitor security alerts across identity, endpoint, email, SaaS and cloud environments, own investigations to documented outcomes, and help improve runbooks and detections with the team.