Security Incident Lead & Forensics Engineer

Samsara; San Francisco (CA); Remote; USD 135,000 - 228,000; Full time

Job summary

Samsara is seeking a Security Incident Response professional to monitor security events, coordinate incidents, and drive forensic investigations within a global team. The role emphasizes building automation, incident strategy, and collaboration with stakeholders across Legal, Compliance, and Information Security.

The candidate should bring strong Python scripting skills, SIEM experience, and a track record of leading investigations in a fast‑growing company.

Qualifications

• 5+ years in Security Incident Response.
• Ability to communicate investigative findings to technical staff, executive leadership, and legal.
• Experience building scripts or tools to support investigations, with Python proficiency.
• Mentor and train security operation engineers on data collection, analysis, and reporting.

Responsibilities

• Monitor security events and provide technical analysis on alerts.
• Lead information security incidents and employee investigations by developing incident response strategy and coordinating to closure.
• Deliver security guidance clearly for incident response and insider threat initiatives.
• Coordinate building services, capabilities, integrations, and implementations to support security operations and incident response.
• Champion Samsara’s cultural principles as we scale globally.

Skills

Security IR

Incident Commander

Python scripting

Forensic analysis

Cloud security

Log analysis

Executive communication

Education

Bachelor's in CS/InfoSec

GIAC GCIH Certification

Tools

SIEM

AWS

GCP

Job description

Samsara is seeking a Security Incident Response professional to monitor security events, coordinate incidents, and drive forensic investigations within a global team. The role emphasizes building automation, incident strategy, and collaboration with stakeholders across Legal, Compliance, and Information Security.

The candidate should bring strong Python scripting skills, SIEM experience, and a track record of leading investigations in a fast‑growing company.