Security Operations Engineer

Samsara; Greater London; Remote; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Flexible remote model

Professional development stipend

Comprehensive health and parentalleave

Job summary

Samsara is a publicly traded IoT platform company enabling digital transformation of physical operations. This Security Operations Engineer role focuses on protecting the company's people, systems, and information through alert triage, incident investigation, and security operations improvements.

You will monitor security alerts across identity, endpoint, email, SaaS and cloud environments, own investigations to documented outcomes, and help improve runbooks and detections with the team.

Qualifications

• Experience triaging and investigating security alerts in SOC or IR.
• Experience with SIEM/EDR or email security to investigate activity.
• Understanding threats like phishing and account compromise, plus networking/OS/identity concepts.
• Ability to query logs, distinguish evidence from assumptions, escalate when needed.
• Scripting in Python or similar to support investigations.

Responsibilities

• Monitor, triage and investigate security alerts across identity, endpoint, email, SaaS and cloud.
• Own routine investigations and incidents through to documented outcomes.
• Support responders during major incidents with evidence collection and containment.
• Maintain investigation records and handovers across regions.
• Improve runbooks and tune detections; contribute scripts or automation.

Skills

SOC/IR experience

Log analysis

Scripting (Python)

Threat understanding

Incident communication

Tools

SIEM

EDR

Email security platforms

Python

Cloud platforms (AWS/GCP)

APIs/Automation platforms

Job description

Samsara is a publicly traded IoT platform company enabling digital transformation of physical operations. This Security Operations Engineer role focuses on protecting the company's people, systems, and information through alert triage, incident investigation, and security operations improvements.

What You'll Do

• Monitor, triage and investigate security alerts across identity, endpoint, email, SaaS and cloud environments using company tools, runbooks and escalation procedures
• Own routine investigations and incidents through to documented outcome by gathering evidence, establishing timelines, assessing activity and explaining conclusions
• Support experienced responders during major security incidents through evidence collection, technical analysis, and containment and recovery actions
• Maintain investigation records and provide clear updates and handovers to teammates across regions
• Improve runbooks, help tune detections, and contribute scripts or automated workflows with team guidance

What You Need

• Hands-on experience triaging and investigating security alerts in SOC, incident response or similar security operations role
• Experience using SIEM, endpoint detection and response (EDR), or email security platforms to investigate suspicious activity
• Understanding of common threats including phishing, account compromise and suspicious endpoint activity, plus networking, operating system and identity concepts needed to investigate them
• Ability to query and interpret logs, distinguish evidence from assumptions, and recognize when further investigation or escalation is needed
• Scripting experience: can read, adapt and write small scripts in Python or another language to support investigations or simplify repetitive work

Nice to Have

• Experience investigating activity in cloud platforms such as AWS or GCP, SaaS applications, or identity systems
• Exposure to writing or tuning detections, threat hunting, or investigating activity across multiple data sources
• Experience using Python, APIs or automation platforms to improve security workflows
• Familiarity with evidence collection or forensic analysis on macOS, Windows or Linux

Above-market total compensation through base salary, performance-based bonus/variable pay, and equity for eligible roles.

• Flexible, employee-led remote model
• professional development stipend
• comprehensive health and parental leave plans.