SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Samsara (NYSE: IOT) is the pioneer of the Connected Operations Cloud, a platform enabling organizations to harness Internet of Things (IoT) data to improve safety, efficiency, and sustainability across physical operations including agriculture, construction, field services, transportation, and manufacturing.
As a Senior Security Operations Engineer on the Security Operations Team, you will monitor and respond to security events, lead security incidents as Incident Commander, and conduct digital forensic investigations supporting Employee Relations, Legal, Compliance, and Information Security initiatives. You will collaborate with a global team of engineers and key stakeholders on security initiatives across the company.
Key responsibilities include:
- Monitor security events and provide technical analysis on alerts
- Lead information security incidents and employee insider investigations, developing incident response strategy and providing stakeholder updates through closure
- Deliver security guidance for incident response and insider threat initiatives
- Coordinate building of services, capabilities, integrations, and technology implementations to support security operations, incident response, and insider threat programs
- Mentor and train security operations engineers on data collection, analysis, and reporting
- Participate in on-call rotation covering weekends and flexible hours aligned to UK operational time
- Champion Samsara's cultural principles as the company scales globally
This role offers autonomy and support to make an impact as part of a recently public company. You will work in a collaborative, humble, and practical manner, bringing security expertise to cross-functional teams.
REQUIREMENTS:
Minimum:
- 5+ years of experience in Security Incident Response
- Ability to communicate investigative findings and strategies to technical staff, executive leadership, and legal
- Proficiency in Python; ability to build scripts or tools to support investigation processes
- Practical experience acting as a lead during security incident response, including monitoring, triaging alerts, and coordinating across teams
- Understanding of analysis and forensics techniques on macOS, Windows, and Linux
- Experience utilizing SIEM tools to perform log reviews
- Experience in cloud architecture and security (AWS, GCP) and cloud-based services
- Participation in on-call rotation with potential to work outside standard business hours, including late evenings, for high-severity incidents
- Flexible hours aligned to UK operational time to support team load
Ideal:
- 2+ years of experience working on insider threat initiatives or employee investigations
- Bachelor's or Master's degree in Computer Science, Information Security, or related field (or relevant industry experience)
- GIAC Certified Incident Handler (GCIH) or similar certification
- Familiarity with common security frameworks and standards (NIST Cybersecurity Framework, ISO 27001, FedRAMP)
