Senior Security Operations Engineer I

NextGenEnergyJobs; San Francisco, Northern (CA, KY); Hybrid; USD 135,000 - 228,000; Full time

Benefits offered by this job

RSU grant

Remote-friendly

Professional development stipend

Health and parental leave

Job summary

Samsara is seeking an experienced Security Incident Response professional to join the Security Operations Team. You will monitor events, lead incidents as Incident Commander, and drive forensic investigations in collaboration with Legal, Compliance, and InfoSec.

You will also build runbooks, automate workflows, and refine security processes while mentoring engineers and delivering practical security guidance across the company.

Qualifications

• 5+ years in Security Incident Response.
• Experience communicating findings to tech staff, executives, and legal.
• Proficient in Python for tooling and automation.
• Experience leading during incidents and investigations.

Responsibilities

• Monitor security events and provide technical analysis on alerts.
• Lead security incidents and investigations, coordinating across teams.
• Develop incident response strategy and drive execution to closure.
• Create runbooks, automate workflows, and streamline processes.
• Share security guidance for incident response and insider threats.
• Collaborate with stakeholders on security initiatives and integrations.
• Embed Samsara’s principles while scaling globally.

Skills

Security Incident Response

Python scripting

Lead incident response

Digital forensics

SIEM usage

Cloud security (AWS/GCP)

Communication to leadership

Investigation reporting

Mentoring security engineers

Education

Bachelor’s or Master in CS/InfoSec

Tools

SIEM platforms

Job description

At Samsara, we embrace a flexible working model that caters to the diverse needs of our teams.

Responsibilities

• As a member of our Security Operations Team, you will collaborate with a global team of engineers to monitor and respond to security events, lead security incidents as Incident Commander, and lead digital forensic investigations in support of Employee Relations, Legal, Compliance, or Information Security cases.
• Although you will be focused on security incident response, you will also have the opportunity to create and maintain runbooks, and automated workflows, and assist in process refinement and implementation. You will collaborate with a diverse team of analysts, engineers, and key stakeholders on security initiatives across the company. Above all, your focus is bringing Security expertise to the table in a collaborative, humble, and practical manner.
• Monitor security events and provide technical analysis on alerts
• Lead information security incidents and employee investigations by developing the incident response strategy, lead the execution through incident closure, while providing incident updates to key stakeholders throughout the incident
• Deliver security guidance clearly and concisely for incident response and insider threat initiatives
• Coordinate the building of services, capabilities, integrations, and implementations of technologies to support security operations, incident response, and insider threat
• Champion, role model, and embed Samsara’s cultural principles (Focus on Customer Success, Build for the Long Term, Adopt a Growth Mindset, Be Inclusive, Win as a Team) as we scale globally and across new offices

Requirements

• 5+ years of experience in Security Incident Response
• Ability to communicate investigative findings and strategies to technical staff, executive leadership, and legal
• Ability to build scripts or tools to support Samsara’s investigation processes, with proficiency in Python
• Mentor and train security operation engineers on data collection, analysis, and reporting technical analysis
• Practical experience acting as a lead during security incident response, including monitoring and triaging alerts, and coordinating across teams
• Understanding of analysis and forensics techniques on macOS, Windows, and Linux
• Experience utilizing SIEM tools to perform log reviews
• Experience in cloud architecture and security (AWS, GCP) and cloud-based services
• This role will be part of our Pacific Time Zone shift and therefore must reside in the Pacific Time Zone, Mountain Time Zone or Central Time Zone of the United States or Canada
• 3+ years of experience working on insider threat initiatives or employee investigations
• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field - or relevant industry experience
• GIAC Certified Incident Handler (GCIH) Certification
• Familiarity with common security frameworks and standards, including NIST Cybersecurity Framework, ISO 27001, FedRAMP
• The range of annual base salary for full-time employees for this position is below. Please note that base pay offered may vary depending on factors including your city of residence, job-related knowledge, skills, and experience. This role is also eligible for an initial RSU grant with no vesting cliff, and ongoing refresh opportunities tied to performance, subject to plan terms and conditions. Learn more about our total rewards and benefits below.
• Annual Base Salary
• $135,481
• —
• $227,700 USD

Benefits

• At Samsara, we build for the people who keep the global economy moving. We want owners, not passengers, which is why our rewards are designed to fuel high-impact builders. Our compensation program delivers above-market total compensation through a combination of base salary, performance-based bonus/variable pay, and equity (for eligible roles) in a high-growth public company. We meaningfully differentiate pay for our top performers, who have the opportunity to earn above-market compensation that can outpace the broader market over time.
• Beyond compensation, we provide the foundations that enable long-term success: a flexible, employee-led remote model, a professional development stipend, comprehensive health and parental leave plans, and more. If you’re ready to build for the long term and own the outcome, your journey starts here.