Senior Security Operations Engineer

Overview

Senior Security Operations Engineer on Samsara's Security Operations Team, working with a global team to monitor and respond to security events, lead incidents as Incident Commander, and lead digital forensic investigations.

What you'll do

• Monitor security events and provide technical analysis on alerts.
• Lead information security incidents and employee insider investigations, developing the incident response strategy and leading execution through incident closure.
• Provide incident updates to key stakeholders throughout each incident.
• Deliver security guidance clearly and concisely for incident response and insider threat initiatives.
• Coordinate the building of services, capabilities, integrations, and implementations of technologies to support security operations, incident response, and insider threat.
• Create and maintain runbooks and automated workflows, and assist in process refinement and implementation.
• Champion, role model, and embed Samsara's cultural principles as the company scales globally and across new offices.
• Participate in the on-call rota covering weekends.

What you'll need

• 5+ years of experience in Security Incident Response.
• Ability to communicate investigative findings and strategies to technical staff, executive leadership, and legal.
• Ability to build scripts or tools to support investigation processes, with proficiency in Python.
• Ability to mentor and train security operations engineers on data collection, analysis, and reporting technical analysis.
• Practical experience acting as a lead during security incident response, including monitoring and triaging alerts and coordinating across teams.
• Understanding of analysis and forensics techniques on macOS, Windows, and Linux.
• Experience utilizing SIEM tools to perform log reviews.
• Experience in cloud architecture and security (AWS, GCP) and cloud-based services.
• Participation in an on-call rotation, with the potential to work outside standard business hours, including late evenings, when responding to high-severity incidents.

Nice to have

• 2+ years of experience working on insider threat initiatives or employee investigations.
• Bachelor's or Master's degree in Computer Science, Information Security, or a related field, or relevant industry experience.
• GIAC Certified Incident Handler (GCIH) or similar certification.
• Familiarity with common security frameworks and standards, including NIST Cybersecurity Framework, ISO 27001, and FedRAMP.

Details

• Open to candidates residing in the Netherlands.
• Part of the EMEA team; hours aligned to the UK, with flexible hours as needed to support team load.
• On-call rotation covering weekends.