Senior Security Operations & Incident Response Engineer

Socket.dev; San Francisco (CA); Hybrid; USD 135,000 - 228,000; Full time

Benefits offered by this job

Remote work options

Professional development stipend

Health and parental leave plans

Job summary

Samsara is seeking an experienced Security Incident Response professional to monitor, respond to, and lead security incidents and investigations. You will also craft runbooks, automate workflows, and collaborate across teams to tighten security operations.

The role requires strong scripting in Python, SIEM proficiency, and a track record mentoring engineers. You will work within a flexible, remote-friendly model and help drive security resilience for a global, public company.

Qualifications

• 5+ years of experience in Security Incident Response.
• Ability to communicate investigative findings to technical staff, executive leadership, and legal.
• Ability to build scripts or tools in Python for investigation workflows.
• Mentor security operation engineers in data collection, analysis and reporting.
• Lead during security incident response, including monitoring and triaging alerts.
• Understanding of forensics on macOS, Windows, and Linux.
• Experience with SIEM tools for log reviews.
• Experience in cloud security (AWS, GCP).

Responsibilities

• Monitor security events and provide technical analysis on alerts
• Lead information security incidents and employee investigations by developing the incident response strategy and guiding execution to closure
• Deliver security guidance clearly for incident response and insider threat initiatives
• Coordinate the building of services and implementations to support security operations
• Champion Samsara’s cultural principles as we scale globally

Skills

Security Incident Response

Python

Forensics

SIEM

Cloud Security (AWS/GCP)

Education

Bachelor’s or Master’s in CS/InfoSec

GIAC Certified Incident Handler (GCIH)

Job description

Samsara is seeking an experienced Security Incident Response professional to monitor, respond to, and lead security incidents and investigations. You will also craft runbooks, automate workflows, and collaborate across teams to tighten security operations.

The role requires strong scripting in Python, SIEM proficiency, and a track record mentoring engineers. You will work within a flexible, remote-friendly model and help drive security resilience for a global, public company.