Senior Security Operations Engineer

• Monitor security events and provide technical analysis on alerts
• Lead information security incidents and employee insider investigations from strategy development through incident closure
• Provide incident updates to key stakeholders throughout investigations
• Deliver clear and concise security guidance for incident response and insider threat initiatives
• Coordinate the building of services, capabilities, integrations, and technology implementations supporting security operations, incident response, and insider threat
• Collaborate with global engineers and cross-functional stakeholders on security initiatives
• Create and maintain runbooks and automated workflows
• Assist with process refinement and implementation
• Mentor and train security operations engineers
• Participate in an on-call rota covering weekends
• Champion Samsara's cultural principles as the company scales globally

• 5+ years of experience in Security Incident Response
• Ability to communicate investigative findings and strategies to technical staff, executive leadership, and legal
• Proficiency in Python for building scripts or tools
• Ability to mentor and train security operations engineers on data collection, analysis, and reporting technical analysis
• Practical experience leading security incident response, including monitoring and triaging alerts and coordinating across teams
• Understanding of analysis and forensics techniques on macOS, Windows, and Linux
• Experience utilizing SIEM tools for log reviews
• Experience in cloud architecture and security, including AWS and GCP, and cloud-based services
• Experience participating in an on-call rotation and working outside standard business hours when required
• Hours aligned to the UK and ability to work flexible hours around team requirements
• 2+ years of experience working on insider threat initiatives or employee investigations
• Bachelor's or Master's degree in Computer Science, Information Security, or a related field, or relevant industry experience
• GIAC Certified Incident Handler (GCIH) or similar certification
• Familiarity with NIST Cybersecurity Framework, ISO 27001, and FedRAMP

• Base salary, performance-based bonus/variable pay, and equity for eligible roles
• Flexible, employee-led remote model
• Professional development stipend
• Comprehensive health plans
• Parental leave plans
• Flexible working model
• Remote work support where aligned with operational requirements