Remote Security Operations Lead — Incident Response & Forensics

Oppurtuna; Polska; Hybrid; PLN 250,000 - 400,000; Full time

Benefits offered by this job

Flexible working

Professional development stipend

Parental leave

Job summary

Samsara is seeking a Senior Security Operations Engineer to monitor security events, lead incident response, and perform insider threat investigations. You will develop runbooks, automation, and cross-functional collaboration across teams in a remote Poland role.

Ideal candidates bring 5+ years in security incident response, strong Python skills, SIEM expertise, and experience with AWS/GCP. The role demands on-call availability and a global operations mindset.

Qualifications

• 5+ years of experience in Security Incident Response.
• Ability to communicate investigative findings to technical staff, executive leadership, and legal.
• Ability to build scripts or tools to support investigation processes, with proficiency in Python.
• Mentor and train security operation engineers on data collection, analysis, and reporting.
• Practical experience acting as a lead during security incident response, including monitoring and triaging alerts, and coordinating across teams.
• Understanding of analysis and forensics techniques on macOS, Windows, and Linux.
• Experience utilizing SIEM tools to perform log reviews.
• Experience in cloud architecture and security (AWS, GCP) and cloud-based services.
• Participation in an on-call rotation, with the potential to work outside standard business hours.

Responsibilities

• Monitor security events and provide technical analysis on alerts.
• Lead information security incidents and insider investigations by developing the incident response strategy, lead the execution through incident closure, while providing incident updates to key stakeholders throughout the incident.
• Deliver security guidance clearly and concisely for incident response and insider threat initiatives.
• Coordinate the building of services, capabilities, integrations, and implementations of technologies to support security operations, incident response, and insider threat.

Skills

Security incident response

Python scripting

SIEM

Cloud security (AWS/GCP)

Incident commander

Forensic analysis

Education

Bachelor’s degree in Computer Science/Info Security

GIAC Certified Incident Handler (GCIH)

Tools

SIEM tools

AWS

GCP

Job description

Samsara is seeking a Senior Security Operations Engineer to monitor security events, lead incident response, and perform insider threat investigations. You will develop runbooks, automation, and cross-functional collaboration across teams in a remote Poland role.

Ideal candidates bring 5+ years in security incident response, strong Python skills, SIEM expertise, and experience with AWS/GCP. The role demands on-call availability and a global operations mindset.