Remote Security Ops Engineer I – Incident Response

First Roles; California; Remote; USD 95,000 - 144,000; Full time

Benefits offered by this job

Remote-friendly

Professional development stipend

Job summary

Samsara is seeking a Security Operations Engineer to join a global SOC. You will triage and investigate alerts, document timelines, and support incident response with evidence collection and analysis. You’ll help improve runbooks and automations while collaborating with teammates across regions.

The role emphasizes hands-on security, strong communication, and a willingness to learn. Remote with US-based eligibility, the position offers growth opportunities in cloud and incident response domains.

Qualifications

• Hands-on experience triaging and investigating security alerts in a SOC or IR role.
• Knowledge of threats such as phishing, account compromise, and suspicious endpoint activity.
• Ability to query and interpret logs and to escalate when needed.
• Some scripting experience in Python or similar to support investigations.

Responsibilities

• Monitor, triage, and investigate security alerts across identity, endpoints, email, SaaS and cloud environments.
• Own routine investigations through to documented outcomes with evidence and timelines.
• Support experienced responders during major incidents with analysis and containment actions.
• Maintain clear investigation records and handovers to teammates across regions.

Skills

Security operations

Incident response

Python scripting

Cloud security

Tools

SIEM

EDR

Email security

Cloud platforms

Job description

Samsara is seeking a Security Operations Engineer to join a global SOC. You will triage and investigate alerts, document timelines, and support incident response with evidence collection and analysis. You’ll help improve runbooks and automations while collaborating with teammates across regions.

The role emphasizes hands-on security, strong communication, and a willingness to learn. Remote with US-based eligibility, the position offers growth opportunities in cloud and incident response domains.