Remote Security Operations Engineer I: Incident Response

Wwshemi; California; Remote; USD 95,000 - 144,000; Full time

Job summary

Samsara is hiring a Security Operations Engineer to triage security alerts, investigate incidents, and support automated workflows. You will develop hands-on execution skills, break down alerts into actionable steps, and work with incident stakeholders to remediate findings, all while embracing a collaborative, growth‑minded culture.

This remote role supports candidates in the United States and Pacific Timezone, offering opportunities to grow across incident response and automation, with a focus

Qualifications

• Hands-on experience triaging and investigating security alerts in a security operations, incident response or similar role.
• Experience using security tools such as a SIEM, endpoint detection and response platform, or email security platform to investigate suspicious activity.
• An understanding of common threats, such as phishing, account compromise and suspicious endpoint activity.
• Ability to query and interpret logs, distinguish evidence from assumptions, and recognise when further investigation or escalation is needed.
• Some scripting experience: you can read, adapt and write small scripts in Python or another language to support an investigation or simplify repetitive work.

Responsibilities

• Monitor, triage and investigate security alerts across identity, endpoint, email, SaaS and cloud environments, using our tools, runbooks and escalation procedures.
• Own routine investigations and incidents through to a documented outcome: gather evidence, establish a timeline, assess the activity and explain your conclusions.
• Support experienced responders during major security incidents through evidence collection, technical analysis, and agreed containment and recovery actions.
• Maintain clear investigation records and provide useful updates and handovers to teammates across regions.
• Improve runbooks, help tune detections, and contribute small scripts or automated workflows with guidance and review from teammates.
• Participate in post‑incident reviews and turn lessons learned into practical improvements.
• Champion Samsara’s cultural principles: Focus on Customer Success, Build for the Long Term, Adopt a Growth Mindset, Be Inclusive, and Win as a Team.

Skills

Security operations

Incident response

Python scripting

Communication

Evidence gathering

Tools

SIEM

EDR tooling

Email security

Cloud AWS/GCP

Job description

Samsara is hiring a Security Operations Engineer to triage security alerts, investigate incidents, and support automated workflows. You will develop hands-on execution skills, break down alerts into actionable steps, and work with incident stakeholders to remediate findings, all while embracing a collaborative, growth‑minded culture.

This remote role supports candidates in the United States and Pacific Timezone, offering opportunities to grow across incident response and automation, with a focus