Senior Security Operations & Incident Response Engineer

Socket.dev; Oregon; On-site; USD 135,000 - 228,000; Full time

Job summary

Samsara is seeking a seasoned Security Incident Response professional to monitor, analyze, and lead security incidents across our global operations. You will develop incident response strategies, triage alerts, and coordinate cross-team efforts while embedding Samsara’s growth mindset and customer-focused principles.

The role requires hands-on technical skills in forensics, SIEM usage, and cloud security (AWS/GCP), with an emphasis on mentorship and cross-functional collaboration in a

Qualifications

• 5+ years of experience in Security Incident Response.
• Ability to communicate investigative findings to technical staff, executive leadership, and legal.
• Ability to build scripts or tools to support investigations, with Python.
• Mentor and train security operation engineers on data collection, analysis, and reporting.

Responsibilities

• Monitor security events and provide technical analysis on alerts.
• Lead information security incidents and investigations; develop incident response strategy and coordinate closure.
• Deliver security guidance for incident response and insider threat initiatives.
• Coordinate building of services and integrations to support security operations.
• Champion Samsara’s cultural principles as we scale globally.

Skills

Security Incident Response

Python scripting

Lead incident response

Forensics techniques

SIEM tools

Cloud security (AWS/GCP)

Technical communication

Mentoring engineers

macOS/Windows/Linux analysis

Education

Bachelor’s or Master’s in CS/InfoSec

Job description

Samsara is seeking a seasoned Security Incident Response professional to monitor, analyze, and lead security incidents across our global operations. You will develop incident response strategies, triage alerts, and coordinate cross-team efforts while embedding Samsara’s growth mindset and customer-focused principles.

The role requires hands-on technical skills in forensics, SIEM usage, and cloud security (AWS/GCP), with an emphasis on mentorship and cross-functional collaboration in a