Remote SOC Engineer: Incident Response & Automation

VulnU; United States; Remoto; USD 95.000 - 144.000; Tempo pieno

Vantaggi offerti da questo lavoro

Paid parental leave

Learning budget

Equity

Retirement match

Flexible PTO

Descrizione del lavoro

Samsara is seeking a Security Operations Engineer to join a global, remote team in the United States. You will triage and investigate alerts across identity, endpoints, email and cloud environments, document timelines and assist with containment and recovery actions.

The role emphasizes automation, runbook improvements, and cross-team collaboration. The ideal candidate will have hands-on IR experience, familiarity with cloud and SaaS threats, and strong written/verbal communication to produce

Competenze

• Hands-on experience triaging security alerts in a SOC or IR role.
• Experience with SIEM/EDR or email security tools to investigate activity.
• Ability to query logs, interpret evidence, and escalate when needed.
• Some scripting in Python or similar to support investigations.
• Clear written and verbal communication for handovers and reports.
• Familiarity with cloud (AWS/GCP), SaaS apps, or identity systems.

Mansioni

• Monitor, triage and investigate security alerts across identity, endpoint, email, SaaS and cloud environments.
• Own routine investigations through to documented outcomes with evidence and timelines.
• Assist incident responders during major security incidents with analysis and containment actions.
• Maintain investigation records and update teammates across regions.
• Improve runbooks, detections and automate repetitive tasks where possible.

Conoscenze

Incident response

Log analysis

Python scripting

Threat hunting

Communication skills

Investigation workflow

Strumenti

SIEM

EDR

Email security

Descrizione del lavoro

Samsara is seeking a Security Operations Engineer to join a global, remote team in the United States. You will triage and investigate alerts across identity, endpoints, email and cloud environments, document timelines and assist with containment and recovery actions.

The role emphasizes automation, runbook improvements, and cross-team collaboration. The ideal candidate will have hands-on IR experience, familiarity with cloud and SaaS threats, and strong written/verbal communication to produce