Remote Security Operations Engineer I - Incident Response

Samsara; California; Remote; USD 95,000 - 144,000; Full time

Benefits offered by this job

Flexible remote model

Professional development stipend

Health and parental leave

Job summary

Samsara is seeking a Security Operations Engineer to triage and investigate alerts, run incident response efforts, and improve tools and runbooks. You will develop independent execution skills, break down alerts into steps, and collaborate with experienced responders during complex incidents.

This is a remote role open to candidates in the United States, with a focus on building scalable security workflows, detections, and automation while protecting people and systems.

Qualifications

• Hands-on experience triaging and investigating security alerts in a security operations or incident response role.
• Experience using SIEM/EDR or email security platforms to investigate suspicious activity.
• Understanding of threats like phishing and account compromise, and related networking/OS/identity concepts.
• Ability to query and interpret logs and distinguish evidence from assumptions.
• Some scripting experience in Python or similar to support investigations.

Responsibilities

• Monitor, triage and investigate security alerts across identity, endpoint, email, SaaS and cloud environments.
• Own routine investigations and incidents through to documented outcomes with evidence and timelines.
• Support experienced responders during major incidents with analysis and containment actions.
• Maintain investigation records and handovers to regional teammates.
• Improve runbooks, tune detections, and contribute scripts or automated workflows.

Skills

Security operations

Incident response

Python scripting

Cloud platforms (AWS/GCP)

SIEM/EDR

Tools

SIEM

EDR

Email security

Job description

Samsara is seeking a Security Operations Engineer to triage and investigate alerts, run incident response efforts, and improve tools and runbooks. You will develop independent execution skills, break down alerts into steps, and collaborate with experienced responders during complex incidents.

This is a remote role open to candidates in the United States, with a focus on building scalable security workflows, detections, and automation while protecting people and systems.