Senior Security Operations Engineer

Overview

Senior Security Operations Engineer on Samsara's Security Operations Team, monitoring and responding to security events, leading security incidents as Incident Commander, and leading digital forensic investigations.

What you'll do

• Monitor security events and provide technical analysis on alerts
• Lead information security incidents and employee insider investigations by developing the incident response strategy and leading execution through incident closure, providing incident updates to key stakeholders throughout
• Deliver security guidance clearly and concisely for incident response and insider threat initiatives
• Coordinate the building of services, capabilities, integrations, and implementations of technologies to support security operations, incident response, and insider threat
• Create and maintain runbooks and automated workflows, and assist in process refinement and implementation
• Champion, role model, and embed Samsara's cultural principles as the company scales globally and across new offices
• Participate in the on-call rota covering weekends

What you'll need

• 5+ years of experience in Security Incident Response
• Ability to communicate investigative findings and strategies to technical staff, executive leadership, and legal
• Ability to build scripts or tools to support investigation processes, with proficiency in Python
• Mentor and train security operation engineers on data collection, analysis, and reporting technical analysis
• Practical experience acting as a lead during security incident response, including monitoring and triaging alerts, and coordinating across teams
• Understanding of analysis and forensics techniques on macOS, Windows, and Linux
• Experience utilizing SIEM tools to perform log reviews
• Experience in cloud architecture and security (AWS, GCP) and cloud-based services
• Participation in an on-call rotation, with potential to work outside standard business hours, including late evenings, when responding to high-severity incidents as part of the global incident response team

Nice to have

• 2+ years of experience working on insider threat initiatives or employee investigations
• Bachelor's or Master's degree in Computer Science, Information Security, or a related field, or relevant industry experience
• GIAC Certified Incident Handler (GCIH) or similar certification
• Familiarity with common security frameworks and standards, including NIST Cybersecurity Framework, ISO 27001, FedRAMP

Details

• Open to candidates residing in Poland; remote
• Part of the EMEA team, with hours aligned to the UK, and flexible hours around this as operational needs require
• On-call rota covering weekends, with potential work outside standard business hours