Security Incident Response Lead

Samsara; United States; Hybrid; USD 120,482 - 174,029; Full time

Job summary

Samsara's Security Operations team in the UK is seeking an experienced Security Incident Response professional to monitor events, lead incidents, and guide forensic investigations. You’ll work with a global engineering group to reduce risk and strengthen defense across the Connected Operations Cloud.

In this role you will develop runbooks, automate workflows, and mentor junior engineers while coordinating with legal, compliance, and HR as needed.

Qualifications

• 5+ years of experience in Security Incident Response.
• Ability to communicate investigative findings to technical staff, executive leadership, and legal.
• Ability to build scripts or tools to support investigations, with proficiency in Python.
• Mentor and train security operation engineers on data collection, analysis, and reporting.
• Practical experience leading security incident response, including monitoring, triage, and cross-team coordination.
• Understanding of analysis and forensics techniques on macOS, Windows, and Linux.
• Experience using SIEM tools for log reviews.
• Experience in cloud architecture and security (AWS, GCP).
• EMEA role hours aligned to UK time; flexible hours may be needed.

Responsibilities

• Monitor security events and provide technical analysis on alerts.
• Lead information security incidents and insider investigations, guiding incident response.
• Deliver security guidance for incident response and insider threat initiatives.
• Coordinate the building of services, capabilities, integrations, and implementations of technologies to support security operations.
• Champion Samsara’s cultural principles as we scale globally.
• Participate in our on-call rota covering weekends.

Skills

Security Incident Response

Python

SIEM tools

AWS

GCP

Incident response leadership

Digital forensics

Cross-team coordination

Cloud security

Education

Bachelor's or Master's in Computer Science or Information Security

GIAC Certified Incident Handler (GCIH)

Tools

AWS

GCP

Python

Job description

Samsara's Security Operations team in the UK is seeking an experienced Security Incident Response professional to monitor events, lead incidents, and guide forensic investigations. You’ll work with a global engineering group to reduce risk and strengthen defense across the Connected Operations Cloud.

In this role you will develop runbooks, automate workflows, and mentor junior engineers while coordinating with legal, compliance, and HR as needed.