Senior Security Engineer - Threat Detection

Samsara; Seattle (WA); On-site; USD 150,000 - 190,000; Full time

Job summary

Samsara Security is seeking a Senior Threat Detection Engineer to build and operate detections across cloud, endpoint, identity, email, and app telemetry. You will own the detection lifecycle from hypothesis to production and collaborate with Security Operations and engineering teams.

The role also explores AI-enabled detection within Samsara's security strategy. You will work with cross-functional teams to strengthen data ingestion, enrichment, and coverage while adhering to Samsara's growth

Qualifications

• 6+ years in security engineering or related tech discipline.
• Strong Python and SQL skills with large data analysis experience.
• Hands-on with detection-as-code, Git workflows, automated tests, CI/CD.
• Deep experience with SIEM platforms including data onboarding and threat intelligence.
• Working knowledge of AWS, Linux, containers, and EDR.
• Proven ability to build systems from scratch and lead projects.

Responsibilities

• Build, deploy, and improve MITRE ATT&CK-aligned detections across cloud, endpoint, identity, email, and app telemetry.
• Own the full detection lifecycle from hypothesis and data validation to deployment and retirement.
• Advance detection-as-code with version control, peer review, automated tests, CI/CD, and better pipeline reliability.
• Identify emerging threat surfaces and build integrations to strengthen data ingestion and coverage.
• Evaluate AI-powered security capabilities, including MCP integrations, threat hunting, and anomaly detection.
• Turn threat intel into actionable detections and retrospective scanning.
• Partner with Security Operations during investigations, incidents, drills, and code pairing.
• Champion Samsara's principles: Focus on Customer Success, Build for the Long Term, Adopt a Growth Mindset, Be Inclusive, Win as a Team.

Skills

Python

SQL

Detections

CI/CD

SIEM

Threat detection

Data analysis

AWS

Linux

EDR

Git-based workflows

Tools

Git-based workflows

Job description

Who We Are

Samsara (NYSE: IOT) is the pioneer of the Connected Operations™ Cloud, which is a platform that enables organizations that depend on physical operations to harness Internet of Things (IoT) data to develop actionable insights and improve their operations. At Samsara, we are helping improve the safety, efficiency and sustainability of the physical operations that power our global economy. Representing more than 40% of global GDP, these industries are the infrastructure of our planet, including agriculture, construction, field services, transportation, and manufacturing - and we are excited to help digitally transform their operations at scale.

About The Role

Samsara Security is looking for a Senior Threat Detection Engineer. This is a hands-on engineering role: you will build and operate the signals, pipelines, and tooling that power how we discover threats against Samsara and our customers. You will report to the Director of Threat Detection and Response and work closely with Security Operations, Application Security, and Enterprise Security, as well as engineering teams across the company. We are looking for someone who takes projects from idea to proof-of-concept to production, who is comfortable being the first person to build something, and who is genuinely interested in what AI can and cannot do for detection engineering - including where it introduces risk rather than removing it. This role is open to candidates residing in the US except the San Francisco Bay Metro Area, NYC Metro Area, and Washington, D.C. Metro Area.

In this role, you will:

• Build, deploy, and continuously improve MITRE ATT&CK-aligned detections across cloud, endpoint, identity, email, and application telemetry, with clear false-positive thresholds.
• Own the full detection lifecycle-from hypothesis, data validation, and baselining through deployment, tuning, validation, and retirement.
• Advance our detection-as-code platform through version control, peer review, automated testing, CI/CD, and improved pipeline reliability and observability.
• Identify emerging threat surfaces and build integrations that strengthen data ingestion, enrichment, and coverage across internal and third‑party systems.
• Evaluate AI‑powered security capabilities, including secure MCP integrations, threat hunting, anomaly detection, and response automation.
• Turn threat intelligence into actionable detection and retrospective scanning.
• Partner closely with Security Operations during investigations, incidents, table‑top exercises, detection maintenance, and code pairing.
• Champion, role model, and embed Samsara's cultural principles (Focus on Customer Success, Build for the Long Term, Adopt a Growth Mindset, Be Inclusive, Win as a Team) as we scale globally and across new offices.

Minimum requirements for the role:

• 6+ years in security engineering, detection engineering, or a related technology discipline.
• Strong Python and SQL skills, with experience analyzing large datasets to build and validate detections.
• Hands‑on experience with detection-as-code, Git‑based workflows, automated testing, and CI/CD deployment.
• Deep experience with modern SIEM platforms, including data onboarding, advanced queries, dashboards, and threat intelligence enrichment.
• Working knowledge of AWS, Linux, containers, and EDR.
• Proven ability to build systems from scratch, lead projects