Remote Security Operations Engineer I

Samsara; United States; Remote; USD 95,000 - 144,000; Full time

Benefits offered by this job

RSU grant

Performance-based bonus

Comprehensive benefits

Job summary

Samsara is seeking a Security Operations Engineer to join a global team protecting people, systems, and information. You will triage alerts, investigate incidents, and help automate workflows across identity, endpoints, email, SaaS, and cloud environments.

The role emphasizes hands-on security craft, evidence-based analysis, and collaboration with incident stakeholders to remediate findings. Remote candidates in the United States and Pacific Timezone are welcome.

Qualifications

• Hands-on experience triaging and investigating security alerts in a SOC or IR role.
• Experience with SIEM/EDR or email security platforms to investigate activity.
• Understanding of phishing, account compromise, and endpoint activity.
• Ability to query and interpret logs and decide on escalation.
• Some scripting in Python or another language to support investigations.

Responsibilities

• Monitor, triage and investigate security alerts across identity, endpoints, email, SaaS and cloud environments.
• Own routine investigations through to documented outcomes with evidence and timelines.
• Support responders during major incidents with evidence collection and analysis.
• Maintain investigation records and provide updates and handovers across regions.
• Improve runbooks and contribute scripts or automation with team guidance.
• Participate in post-incident reviews and turn lessons into improvements.
• Champion Samsara’s cultural principles: Customer Success, Long-Term Focus, Growth Mindset, Inclusion, Team Win.

Skills

Security operations

Incident response

Threat hunting

Python scripting

Log analysis

Clear communication

Tools

SIEM

EDR

Email security

Cloud platforms (AWS/GCP)

APIs

Job description

Samsara is seeking a Security Operations Engineer to join a global team protecting people, systems, and information. You will triage alerts, investigate incidents, and help automate workflows across identity, endpoints, email, SaaS, and cloud environments.

The role emphasizes hands-on security craft, evidence-based analysis, and collaboration with incident stakeholders to remediate findings. Remote candidates in the United States and Pacific Timezone are welcome.