Security Operations Lead: Incident Response & Forensics

Samsara; Northern (KY); Hybrid; USD 135,000 - 228,000; Full time

Benefits offered by this job

Flexible/remote working

Professional development stipend

Health and parental leave

Job summary

Samsara is seeking an experienced Security Incident Response professional to join the Security Operations Team. You will monitor events, lead incidents as Incident Commander, and drive digital forensic investigations across Legal, Compliance, and Employee Relations.

You’ll also create runbooks, automate workflows, and collaborate with analysts and engineers to strengthen security operations. The role requires strong incident leadership, forensics knowledge, and the ability to mentor others while

Qualifications

• 5+ years of experience in Security Incident Response.
• Ability to communicate investigative findings to technical staff, leadership, and legal.
• Ability to build scripts or tools to support investigation processes, with proficiency in Python.
• Mentor and train security operation engineers on data collection, analysis, and reporting.

Responsibilities

• Monitor security events and provide technical analysis on alerts.
• Lead information security incidents and employee investigations by developing the incident response strategy and coordinating execution.
• Deliver security guidance clearly for incident response and insider threat initiatives.
• Coordinate building services, capabilities, integrations, and implementations to support security operations and incident response.
• Embed Samsara’s cultural principles as we scale globally.

Skills

Security Incident Response

Investigation communication

Python scripting

Mentor security engineers

Incident leadership

Forensics (macOS/Windows/Linux)

Education

Bachelor’s or Master’s in CS/InfoSec

GCIH Certification

Tools

SIEM tools

AWS / GCP security

Log review

Job description

Samsara is seeking an experienced Security Incident Response professional to join the Security Operations Team. You will monitor events, lead incidents as Incident Commander, and drive digital forensic investigations across Legal, Compliance, and Employee Relations.

You’ll also create runbooks, automate workflows, and collaborate with analysts and engineers to strengthen security operations. The role requires strong incident leadership, forensics knowledge, and the ability to mentor others while