Senior Security Operations Engineer

Samsara; United Kingdom; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Remote work option

Professional development stipend

Health and parental leave

Job summary

Samsara is seeking a Security Incident Response professional to join the Security Operations Team in the UK. You will monitor security events, lead incidents as Incident Commander, and coordinate investigations across internal stakeholders.

You will also develop runbooks, automate workflows, and collaborate with a global team to strengthen our cloud security posture (AWS, GCP). This role offers on-call duties and flexibility to work remote or hybrid within the UK.

Qualifications

• 5+ years of experience in Security Incident Response.
• Ability to communicate investigative findings to technical staff, executive leadership, and legal.
• Proficiency in Python for building scripts to support investigations.
• Experience acting as a lead during security incident response.
• Understanding of forensics techniques on macOS, Windows, and Linux.

Responsibilities

• Monitor security events and provide technical analysis on alerts.
• Lead information security incidents and employee insider investigations.
• Deliver security guidance for incident response and insider threat initiatives.
• Coordinate the building of services, capabilities, integrations, and implementations of technologies to support security operations.
• Participate in on-call rotations, including weekends.

Skills

Incident response

Python

Cloud security

Communication

SIEM

Forensics

Education

Bachelor’s or Master’s degree in Computer Science or Information Security

GIAC Certified Incident Handler (GCIH)

Tools

SIEM tools

AWS

GCP

Job description

Samsara (NYSE: IOT) is the pioneer of the Connected Operations™ Cloud, which is a platform that enables organizations that depend on physical operations to harness Internet of Things (IoT) data to develop actionable insights and improve their operations. At Samsara, we are helping improve the safety, efficiency and sustainability of the physical operations that power our global economy. Representing more than 40% of global GDP, these industries are the infrastructure of our planet, including agriculture, construction, field services, transportation, and manufacturing — and we are excited to help digitally transform their operations at scale.

Working at Samsara means you’ll help define the future of physical operations and be on a team that’s shaping an exciting array of product solutions, including Video-Based Safety, Vehicle Telematics, Apps and Driver Workflows, and Equipment Monitoring. As part of a recently public company, you’ll have the autonomy and support to make an impact as we build for the long term.

About the role:

As a member of our Security Operations Team, you will collaborate with a global team of engineers to monitor and respond to security events, lead security incidents as Incident Commander, and lead digital forensic investigations in support of Employee Relations, Legal, Compliance, or Information Security cases.

Although you will be focused on security incident response, you will also have the opportunity to create and maintain runbooks, and automated workflows, and assist in process refinement and implementation. You will collaborate with a diverse team of engineers, and key stakeholders on security initiatives across the company. Above all, your focus is bringing Security expertise to the table in a collaborative, humble, and practical manner.

Location:

This role is open to candidates residing in the UK

You should apply if:

• You want to impact the industries that run our world: Every phone call you answer and every email you send can affect whether truck drivers deliver goods on time and without accidents, whether students get dropped off safely from school, or whether power gets restored quickly after a natural disaster.
• You thrive the most when solving problems: Our constantly expanding technology and the complexities faced by our customers provide an exciting range of challenges for our Customer Success teams. With a growth mindset and a desire to learn, you will strategically partner with our customers to find unique solutions to help keep their operations safe, efficient, and sustainable.
• You are a natural relationship builder: Whether the relationship is with our customers or with cross‑functional teams in Samsara, you are in constant communication and collaboration with key stakeholders to win as a team.
• You are the architect of your own career: If you put in the work, this role won’t be your last at Samsara. This Customer Success team is still shaping its future and you will have plenty of autonomy and opportunities to master your craft in a hyper‑growth environment.
• You want to be with the best: At Samsara, we win together, celebrate together and support each other. You will be surrounded by the best and brightest professionals out there.

In this role, you will:

• Monitor security events and provide technical analysis on alerts
• Lead information security incidents and employee insider investigations by developing the incident response strategy, lead the execution through incident closure, while providing incident updates to key stakeholders throughout the incident
• Deliver security guidance clearly and concisely for incident response and insider threat initiatives
• Coordinate the building of services, capabilities, integrations, and implementations of technologies to support security operations, incident response, and insider threat
• Champion, role model, and embed Samsara’s cultural principles (Focus on Customer Success, Build for the Long Term, Adopt a Growth Mindset, Be Inclusive, Win as a Team) as we scale globally and across new offices
• Participate in our on‑call rota covering weekends

Minimum requirements for the role:

• 5+ years of experience in Security Incident Response
• Ability to communicate investigative findings and strategies to technical staff, executive leadership, and legal
• Ability to build scripts or tools to support Samsara’s investigation processes, with proficiency in Python
• Mentor and train security operation engineers on data collection, analysis, and reporting technical analysis
• Practical experience acting as a lead during security incident response, including monitoring and triaging alerts, and coordinating across teams
• Understanding of analysis and forensics techniques on macOS, Windows, and Linux
• Experience utilizing SIEM tools to perform log reviews
• Experience in cloud architecture and security (AWS, GCP) and cloud‑based services
• Participation in an on‑call rotation, with the potential to work outside standard business hours, including late evenings, when responding to high‑severity incidents as part of our global incident response team.
• This role will be part of our EMEA so your hours will be aligned to the UK. As an operational time you may be expected to work flexible hours around this to support the load of the team

An ideal candidate also has:

• 2+ years of experience working on insider threat initiatives or employee investigations
• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field - or relevant industry experience
• GIAC Certified Incident Handler (GCIH) or similar Certification
• Familiarity with common security frameworks and standards, including NIST Cybersecurity Framework, ISO 27001, FedRAMP

Total Rewards

At Samsara, we build for the people who keep the global economy moving. We want owners, not passengers, which is why our rewards are designed to fuel high‑impact builders. Our compensation program delivers above‑market total compensation through a combination of base salary, performance‑based bonus/variable pay, and equity (for eligible roles) in a high‑growth public company. We meaningfully differentiate pay for our top performers, who have the opportunity to earn above‑market compensation that can outpace the broader market over time.

Beyond compensation, we provide the foundations that enable long‑term success: a flexible, employee‑led remote model, a professional development stipend, comprehensive health and parental leave plans, and more. If you’re ready to build for the long term and own the outcome, your journey starts here.

Flexible Working

At Samsara, we embrace a flexible working model that caters to the diverse needs of our teams. Our offices are open for those who prefer to work in‑person and we also support remote work where it aligns with our operational requirements. For certain positions, being close to one of our offices or within a specific geographic area is important to facilitate collaboration, access to resources, or alignment with our service regions. In these cases, the job description will clearly indicate any working location requirements. Our goal is to ensure that all members of our team can contribute effectively, whether they are working on‑site, in a hybrid model, or fully remotely. All offers of employment are contingent upon an individual’s ability to secure and maintain the legal right to work at the company and in the specified work location, if applicable.

Belonging at Samsara

At Samsara, we welcome everyone regardless of their background. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, gender, gender identity, sexual orientation, protected veteran status, disability, age, and other characteristics protected by law. We depend on the unique approaches of our team members to help us solve complex problems and want to ensure that Samsara is a place where people from all backgrounds can make an impact.

Accommodations

Samsara is an inclusive work environment, and we are committed to ensuring equal opportunity in employment for qualified persons with disabilities. Please email [e-mail] or click here if you require any reasonable accommodations throughout the recruiting process.