Security Operations Engineer I

As a Security Operations Engineer at Samsara, you will join a global team dedicated to protecting people, systems, and information. You will triage and investigate security alerts, run incident response efforts, and help improve tools, runbooks, and automated workflows.

Responsibilities:

• Monitor, triage, and investigate security alerts across identity, endpoint, email, SaaS, and cloud environments.
• Own routine investigations and incidents through to a documented outcome.
• Support experienced responders during major security incidents.
• Maintain clear investigation records and provide useful updates and handovers to teammates.
• Improve runbooks, help tune detections, and contribute small scripts or automated workflows.
• Participate in post-incident reviews and turn lessons learned into practical improvements.

Requirements:

• Hands-on experience triaging and investigating security alerts in a security operations or incident response role.
• Experience using security tools such as a SIEM, endpoint detection and response platform, or email security platform.
• Understanding of common threats and networking, operating system, and identity concepts.
• Ability to query and interpret logs, distinguish evidence from assumptions, and recognize when further investigation or escalation is needed.
• Some scripting experience in Python or another language.
• Clear written and verbal communication.

Nice to have:

• Experience investigating activity in cloud platforms, SaaS applications, or identity systems.
• Exposure to writing or tuning detections, threat hunting, or investigating activity across multiple data sources.
• Experience using Python, APIs, or automation platforms to improve a security workflow.
• Familiarity with evidence collection or forensic analysis on macOS, Windows, or Linux.