Samsara
Senior Security Operations Engineer
Remote - UK. Posted 4 months ago
The role
You will monitor and respond to security events, and lead security incidents as Incident Commander. You will also lead digital forensic investigations for Employee Relations, Legal, Compliance, or Information Security cases.
What you will do
- Monitor security events and provide technical analysis on alerts
- Lead information security incidents and employee insider investigations, from response strategy through incident closure
- Give incident updates to key stakeholders throughout each incident
- Deliver clear, concise security guidance for incident response and insider threat initiatives
- Coordinate building of services, integrations and technologies for security operations, incident response and insider threat
- Create and maintain runbooks and automated workflows
- Participate in the on-call rota covering weekends
- Champion Samsara's cultural principles as the company scales
Required qualifications
- 5+ years of experience in Security Incident Response
- Ability to communicate investigative findings to technical staff, executive leadership and legal
- Ability to build scripts or tools for investigation processes, with proficiency in Python
- Ability to mentor and train security operation engineers on data collection, analysis and reporting
- Practical experience leading security incident response, including monitoring and triaging alerts and coordinating across teams
- Understanding of analysis and forensics techniques on macOS, Windows and Linux
- Experience using SIEM tools to perform log reviews
- Experience in cloud architecture and security (AWS, GCP) and cloud-based services
- Participation in an on-call rotation, including outside standard business hours for high-severity incidents
Nice to have
- 2+ years of experience on insider threat initiatives or employee investigations
- Bachelor's or Master's degree in Computer Science, Information Security or a related field, or relevant industry experience
- GIAC Certified Incident Handler (GCIH) or similar certification
- Familiarity with NIST Cybersecurity Framework, ISO 27001 and FedRAMP
Benefits
- Above-market total compensation, including base salary, performance-based bonus or variable pay, and equity for eligible roles
- Flexible, employee-led remote working model
- Professional development stipend
- Comprehensive health and parental leave plans
Before you apply
- Offers are contingent on the legal right to work at the company and in the specified work location
- Samsara uses Tofu, a fraud detection tool, to validate applications
- Samsara does not charge applicants any fees at any stage of hiring
About the company
Samsara (NYSE: IOT) makes the Connected Operations Cloud, which helps organizations that depend on physical operations use IoT data to improve safety, efficiency and sustainability. Its customers work in industries such as agriculture, construction, field services, transportation and manufacturing.