Senior Security Incident Response Engineer (Remote)

Samsara; United Kingdom; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Remote work option

Professional development stipend

Health and parental leave

Job summary

Samsara is seeking a Security Incident Response professional to join the Security Operations Team in the UK. You will monitor security events, lead incidents as Incident Commander, and coordinate investigations across internal stakeholders.

You will also develop runbooks, automate workflows, and collaborate with a global team to strengthen our cloud security posture (AWS, GCP). This role offers on-call duties and flexibility to work remote or hybrid within the UK.

Qualifications

• 5+ years of experience in Security Incident Response.
• Ability to communicate investigative findings to technical staff, executive leadership, and legal.
• Proficiency in Python for building scripts to support investigations.
• Experience acting as a lead during security incident response.
• Understanding of forensics techniques on macOS, Windows, and Linux.

Responsibilities

• Monitor security events and provide technical analysis on alerts.
• Lead information security incidents and employee insider investigations.
• Deliver security guidance for incident response and insider threat initiatives.
• Coordinate the building of services, capabilities, integrations, and implementations of technologies to support security operations.
• Participate in on-call rotations, including weekends.

Skills

Incident response

Python

Cloud security

Communication

SIEM

Forensics

Education

Bachelor’s or Master’s degree in Computer Science or Information Security

GIAC Certified Incident Handler (GCIH)

Tools

SIEM tools

AWS

GCP

Job description

Samsara is seeking a Security Incident Response professional to join the Security Operations Team in the UK. You will monitor security events, lead incidents as Incident Commander, and coordinate investigations across internal stakeholders.

You will also develop runbooks, automate workflows, and collaborate with a global team to strengthen our cloud security posture (AWS, GCP). This role offers on-call duties and flexibility to work remote or hybrid within the UK.