Senior Security Operations Engineer - Incident Lead Remote

Samsara; San Francisco (CA); Remote; USD 150,000 - 190,000; Full time

Benefits offered by this job

Remote-friendly model

Professional development stipend

Comprehensive health plan

Parental leave

Job summary

Samsara is a leading Connected Operations Cloud company seeking an experienced Security Incident Response lead. You will monitor, analyze, and respond to security events, lead incidents as Incident Commander, and drive digital forensics investigations in collaboration with Legal, Compliance, and Employee Relations.

This role emphasizes practical, collaborative security expertise for a global company. Candidates must reside in the Pacific Time Zone (US/Canada) and be prepared for on-call

Qualifications

• 5+ years of experience in Security Incident Response.
• Ability to communicate investigative findings and strategies to technical staff, executive leadership, and legal.
• Ability to build scripts or tools to support investigations, with proficiency in Python.
• Mentor and train security operation engineers on data collection, analysis, and reporting.
• Practical experience acting as a lead during security incident response, coordinating across teams.
• Understanding of analysis and forensics techniques on macOS, Windows, and Linux.
• Experience utilizing SIEM tools to perform log reviews.
• Experience in cloud architecture and security (AWS, GCP).
• This role will be part of our Pacific Time Zone shift and therefore must reside in the Pacific Time Zone of the United States or Canada.
• This role requires participation in an on-call rotation, with potential to work outside standard hours.

Responsibilities

• Monitor security events and provide technical analysis on alerts.
• Lead information security incidents and employee investigations by developing incident response strategy and coordinating to closure.
• Deliver security guidance for incident response and insider threat initiatives.
• Coordinate building services and technologies to support security operations and incident response.
• Champion Samsara’s cultural principles while scaling globally.

Skills

Security Incident Response

Python scripting

Incident leadership

Digital forensics

SIEM tools

Cloud security (AWS/GCP)

Cross-functional communication

On-call rotation

MacOS/Windows/Linux forensics

Investigation reporting

Education

Bachelor’s or Master’s degree in Computer Science, Information Security, or related field

GIAC Certified Incident Handler (GCIH) Certification

Tools

Python

AWS

GCP

Job description

Samsara is a leading Connected Operations Cloud company seeking an experienced Security Incident Response lead. You will monitor, analyze, and respond to security events, lead incidents as Incident Commander, and drive digital forensics investigations in collaboration with Legal, Compliance, and Employee Relations.

This role emphasizes practical, collaborative security expertise for a global company. Candidates must reside in the Pacific Time Zone (US/Canada) and be prepared for on-call