Senior Security Ops Engineer - Incident Response (Remote)

Samsara; Seattle (WA); Hybrid; USD 135,000 - 228,000; Full time

Benefits offered by this job

Flexible working

Remote-friendly environment

Professional development stipend

Health and parental leave

Job summary

Samsara is seeking an experienced Security Incident Response Lead to join our Security Operations Team. You will monitor, triage and respond to security events, act as Incident Commander, and guide forensic investigations in collaboration with Legal, Compliance, and IT.

The ideal candidate will build runbooks, automate workflows, mentor junior engineers, and help scale security programs across a global, fast-growing company.

Qualifications

• 5+ years of experience in Security Incident Response.
• Ability to communicate investigative findings to technical staff, executive leadership, and legal.
• Ability to build scripts or tools to support Samsara’s investigation processes, with proficiency in Python.
• Mentor and train security operation engineers on data collection, analysis, and reporting technical analysis.
• Practical experience acting as a lead during security incident response, including monitoring and triaging alerts, and coordinating across teams.
• Understanding of analysis and forensics techniques on macOS, Windows, and Linux.
• Experience utilizing SIEM tools to perform log reviews.
• Experience in cloud architecture and security (AWS, GCP) and cloud-based services.
• This role will be part of our Pacific Time Zone shift and therefore must reside in the Pacific Time Zone, Mountain Time Zone or Central Time Zone of the United States or Canada

Responsibilities

• Monitor security events and provide technical analysis on alerts
• Lead information security incidents and employee investigations by developing the incident response strategy, lead the execution through incident closure, while providing incident updates to key stakeholders throughout the incident
• Deliver security guidance clearly and concisely for incident response and insider threat initiatives
• Coordinate the building of services, capabilities, integrations, and implementations of technologies to support security operations, incident response, and insider threat
• Champion, role model, and embed Samsara’s cultural principles as we scale globally and across new offices

Skills

Security Incident Response

Python scripting

Communication

Mentoring

Incident coordination

Forensics

Education

Bachelor’s or Master’s in Computer Science or Information Security

GIAC Certified Incident Handler (GCIH)

Tools

AWS

GCP

SIEM

Job description

Samsara is seeking an experienced Security Incident Response Lead to join our Security Operations Team. You will monitor, triage and respond to security events, act as Incident Commander, and guide forensic investigations in collaboration with Legal, Compliance, and IT.

The ideal candidate will build runbooks, automate workflows, mentor junior engineers, and help scale security programs across a global, fast-growing company.