Senior Security Operations Engineer I

The role

You will monitor and respond to security events and lead security incidents as Incident Commander. You will also lead digital forensic investigations and create automated workflows and runbooks.

What you will do

• Monitor security events and provide technical analysis on alerts
• Lead information security incidents and employee investigations
• Develop incident response strategy and lead execution through closure
• Provide incident updates to key stakeholders
• Deliver security guidance for incident response and insider threat initiatives
• Coordinate building of services, capabilities, integrations, and technology implementations
• Mentor and train security operation engineers
• Champion and embed cultural principles

Required qualifications

• 5+ years of experience in Security Incident Response
• Ability to communicate investigative findings and strategies to technical staff, executive leadership, and legal
• Ability to build scripts or tools with proficiency in Python
• Mentor and train security operation engineers on data collection, analysis, and reporting technical analysis
• Practical experience acting as a lead during security incident response
• Understanding of analysis and forensics techniques on macOS, Windows, and Linux
• Experience utilizing SIEM tools to perform log reviews
• Experience in cloud architecture and security (AWS, GCP) and cloud-based services
• Must reside in the Pacific Time Zone of the United States or Canada

Nice to have

• 3+ years of experience working on insider threat initiatives or employee investigations
• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field - or relevant industry experience
• GIAC Certified Incident Handler (GCIH) Certification
• Familiarity with common security frameworks and standards, including NIST Cybersecurity Framework, ISO 27001, FedRAMP

Benefits

• Flexible, employee-led remote model
• Professional development stipend
• Comprehensive health and parental leave plans

Before you apply

• Must reside in the Pacific Time Zone of the United States or Canada
• All offers of employment are contingent upon an individual’s ability to secure and maintain the legal right to work at the company and in the specified work location

About the company

Samsara is the pioneer of the Connected Operations Cloud, a platform that enables organizations to harness Internet of Things (IoT) data. The company helps improve the safety, efficiency and sustainability of physical operations.