Senior Security Operations Engineer I

Stack

Responsibilities

• ▹Monitor security events and provide technical analysis on alerts
• ▹Lead information security incidents and employee investigations: develop the response strategy, drive execution through closure and keep stakeholders updated
• ▹Deliver clear, concise security guidance for incident response and insider threat initiatives
• ▹Coordinate the building of services, capabilities, integrations and technologies supporting security operations, incident response and insider threat
• ▹Create runbooks and automated workflows and help refine processes

Requirements

• ▹5+ years of experience in Security Incident Response
• ▹Ability to communicate investigative findings and strategies to technical staff, executive leadership and legal
• ▹Ability to build scripts or tools supporting investigations, with proficiency in Python
• ▹Mentor and train security operations engineers on data collection, analysis and reporting
• ▹Practical experience leading security incident response, including monitoring and triaging alerts and coordinating across teams
• ▹Understanding of analysis and forensics techniques on macOS, Windows and Linux
• ▹Experience using SIEM tools for log reviews
• ▹Experience in cloud architecture and security (AWS, GCP)
• ▹The role is on the Pacific Time Zone shift, so you must reside in the Pacific, Mountain or Central Time Zone of the United States or Canada

Nice to have

• ▹3+ years working on insider threat initiatives or employee investigations
• ▹GIAC Certified Incident Handler (GCIH) certification
• ▹Familiarity with common security frameworks and standards: NIST Cybersecurity Framework, ISO 27001, FedRAMP

Soft skills

What we offer

• ▹Initial RSU grant with no vesting cliff, plus ongoing performance-based refreshes

About the company

Samsara (NYSE: IOT) is the pioneer of the Connected Operations Cloud, using IoT data to help industries built on physical operations work more safely, efficiently and sustainably.