Senior Security Operations Engineer

About the Role

As a member of our Security Operations Team, you will collaborate with a global team of engineers to monitor and respond to security events, lead security incidents as Incident Commander, and lead digital forensic investigations in support of Employee Relations, Legal, Compliance, or Information Security cases.

Although you will be focused on security incident response, you will also have the opportunity to create and maintain runbooks, automated workflows, and assist in process refinement and implementation. You will collaborate with a diverse team of analysts, engineers, and key stakeholders on security initiatives across the company.

*Note: This role is open to candidates residing in the US or Canada in the Pacific Time Zone, and requires participation in an on-call rotation with potential off-hours response for high-severity incidents.*

Responsibilities

• Monitor security events and provide technical analysis on alerts.
• Lead information security incidents and employee investigations by developing incident response strategy, leading execution through closure, and providing updates to key stakeholders.
• Deliver clear and concise security guidance for incident response and insider threat initiatives.
• Coordinate the building of services, capabilities, integrations, and technology implementations supporting security operations, incident response, and insider threat.
• Champion Samsara's cultural principles as the company scales globally.

Minimum Requirements

• 5+ years of experience in Security Incident Response.
• Ability to communicate investigative findings and strategies to technical staff, executive leadership, and legal.
• Ability to build scripts or tools to support investigation processes, with proficiency in Python.
• Experience mentoring and training security operations engineers on data collection, analysis, and reporting.
• Practical experience acting as a lead during security incident response, including monitoring/triaging alerts and coordinating across teams.
• Understanding of analysis and forensics techniques on macOS, Windows, and Linux.
• Experience utilizing SIEM tools to perform log reviews.
• Experience in cloud architecture and security (AWS, GCP) and cloud-based services.
• Reside in the Pacific Time Zone of the United States or Canada.
• Ability to participate in an on-call rotation outside standard business hours.

Preferred Qualifications

• 3+ years of experience working on insider threat initiatives or employee investigations.
• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field (or relevant industry experience).
• GIAC Certified Incident Handler (GCIH) certification.
• Familiarity with common security frameworks and standards (NIST CSF, ISO 27001, FedRAMP).