Senior Security Operations Engineer I — Remote IR Lead

Antler; United States; On-site; USD 135,481 - 227,700; Full time

Job summary

Samsara is seeking an experienced Security Operations professional to monitor and respond to security events, lead incidents as incident commander, and drive forensic investigations. You will craft runbooks, automation, and improve processes in collaboration with engineers and stakeholders.

The role emphasizes practical security expertise, collaboration, and a focus on customer success while supporting a flexible remote model in the US.

Qualifications

• 5+ years of experience in Security Incident Response.
• Ability to communicate investigative findings to technical staff, executives, and legal.
• Ability to build scripts or tools to support investigations, with Python.
• Mentor and train security operation engineers on data collection and reporting.
• Lead during security incidents, coordinating across teams.
• Understanding of forensics techniques on macOS, Windows, and Linux.
• Experience using SIEM tools for log reviews.
• Experience in cloud security (AWS, GCP).
• Role aligned to Pacific/Mountain/Central US time zones.

Responsibilities

• Monitor security events and provide technical analysis on alerts.
• Lead information security incidents and investigations, managing incident strategy and closure.
• Deliver clear security guidance for incident response and insider threat initiatives.
• Coordinate services, integrations, and implementations to support security operations.
• Embed Samsara’s cultural principles as we scale globally.

Skills

Incident Response

Python

Incident Leadership

Digital Forensics

SIEM

Cloud Security

Communication

Mentoring

Mac/Windows/Linux forensics

Education

Bachelors or Masters in CS/Info Security

GIAC Certified Incident Handler (GCIH)

Job description

Samsara is seeking an experienced Security Operations professional to monitor and respond to security events, lead incidents as incident commander, and drive forensic investigations. You will craft runbooks, automation, and improve processes in collaboration with engineers and stakeholders.

The role emphasizes practical security expertise, collaboration, and a focus on customer success while supporting a flexible remote model in the US.