Senior Threat Detection Engineer

Samsara; California; Remote; USD 140,000 - 190,000; Full time

Job summary

Samsara is seeking a Senior Threat Detection Engineer to build and operate signals, pipelines, and tooling that power threat discovery across cloud, endpoint, identity, email, and application telemetry. You will report to the Director of Threat Detection and Response and collaborate with Security Operations, Application Security, and Enterprise Security, as well as engineering teams.

This role is open to candidates in the US excluding the San Francisco Bay Area, NYC Metro, and DC Metro areas.

Qualifications

• 6+ years in security engineering, detection engineering, or related tech.
• Strong Python and SQL skills with large dataset analysis for detections.
• Experience with detection-as-code, Git-based workflows, automated testing, and CI/CD.
• Deep experience with modern SIEM platforms and data onboarding.
• Working knowledge of AWS, Linux, containers, and EDR.
• Proven ability to build systems from scratch and lead projects.

Responsibilities

• Build, deploy, and continuously improve MITRE ATT&CK-aligned detections across cloud, endpoint, identity, email, and application telemetry.
• Own the full detection lifecycle—from hypothesis to validation, deployment, tuning, and retirement.
• Advance the detection-as-code platform with version control, reviews, automated tests, and observability.
• Identify emerging threat surfaces and build integrations to strengthen data ingestion and coverage.
• Evaluate AI-powered security capabilities, including secure MCP integrations and anomaly detection.
• Turn threat intelligence into actionable detection and retrospective scanning.
• Collaborate with Security Operations during investigations, exercises, maintenance, and code reviews.

Skills

Python

SQL

Detection-as-code

Git workflows

CI/CD

SIEM

AWS

Linux

Containers

EDR

Job description

Samsara is seeking a Senior Threat Detection Engineer to build and operate signals, pipelines, and tooling that power threat discovery across cloud, endpoint, identity, email, and application telemetry. You will report to the Director of Threat Detection and Response and collaborate with Security Operations, Application Security, and Enterprise Security, as well as engineering teams.

This role is open to candidates in the US excluding the San Francisco Bay Area, NYC Metro, and DC Metro areas.