Incidents & Forensics Lead – Remote Security Ops

Samsara Inc.; San Francisco (CA); On-site; USD 135,000 - 228,000; Full time

Benefits offered by this job

RSU grant with vesting

Professional development stipend

Job summary

Samsara Inc. is seeking an experienced Security Incident Response professional to monitor security events, lead incidents as Incident Commander, and drive digital forensic investigations in collaboration with Legal, Compliance, and Information Security teams.

The ideal candidate will develop runbooks, automate workflows, mentor engineers, and coordinate across global stakeholders while upholding Samsara’s cultural principles.

Qualifications

• 5+ years of experience in Security Incident Response.
• Ability to communicate investigative findings to technical staff, executives, and legal.
• Ability to build scripts or tools to support investigation processes, with Python.
• Mentor and train security operation engineers on data collection, analysis, and reporting.
• Practical experience leading security incident response, including monitoring and triage.
• Understanding of analysis and forensics techniques on macOS, Windows, and Linux.
• Experience using SIEM tools for log reviews.
• Experience in cloud security (AWS, GCP).
• Must reside in Pacific Time Zone or adjacent zones in the US/Canada.

Responsibilities

• Monitor security events and provide technical analysis on alerts.
• Lead security incidents and investigations through incident closure with stakeholders.
• Deliver clear security guidance for incident response and insider threat initiatives.
• Coordinate services, integrations, and implementations to support security operations.
• Model Samsara’s cultural principles while scaling globally.

Skills

Security Incident Response

Communication of findings

Python scripting

Leadership during incidents

Forensics (macOS/Windows/Linux)

SIEM experience

Cloud security (AWS/GCP)

Cross-team coordination

Pacific/US time-zone readiness

Education

Bachelor’s or Master’s in CS/InfoSec or equivalent

GIAC GCIH Certification

Tools

Python

SIEM tools

AWS/GCP security

Job description

Samsara Inc. is seeking an experienced Security Incident Response professional to monitor security events, lead incidents as Incident Commander, and drive digital forensic investigations in collaboration with Legal, Compliance, and Information Security teams.

The ideal candidate will develop runbooks, automate workflows, mentor engineers, and coordinate across global stakeholders while upholding Samsara’s cultural principles.