Description
Samsara Security is looking for a Senior Threat Detection Engineer to build and operate the signals, pipelines, and tooling that power threat detection against Samsara and its customers.
The Threat Detection team owns the detection platform end-to-end, including data pipelines, detection content, CI/CD, and AI-assisted tooling.
As a Senior Threat Detection Engineer, you will:
- Build, deploy, and continuously improve MITRE ATT&CK–aligned detections across cloud, endpoint, identity, email, and application telemetry
- Own the full detection lifecycle, from hypothesis to deployment, tuning, validation, and retirement
- Advance the detection-as-code platform through version control, peer review, automated testing, CI/CD, and improved pipeline reliability and observability
- Identify emerging threat surfaces and build integrations to strengthen data ingestion, enrichment, and coverage
- Evaluate AI-powered security capabilities, including secure MCP integrations, threat hunting, anomaly detection, and response automation
- Turn threat intelligence into actionable detection and retrospective scanning
- Partner with Security Operations during investigations, incidents, and detection maintenance
Minimum requirements:
- 6+ years in security engineering, detection engineering, or a related technology discipline
- Strong Python and SQL skills, with experience analyzing large datasets
- Hands-on experience with detection-as-code, Git-based workflows, automated testing, and CI/CD deployment
- Deep experience with modern SIEM platforms, including data onboarding, advanced queries, dashboards, and threat intelligence enrichment
- Working knowledge of AWS, Linux, containers, and EDR
Ideal candidates also have experience with:
- Data orchestration platforms such as Airflow or Databricks
- Applied experience with LLMs, agentic frameworks, and MCP integrations
- Behavioral analytics, anomaly detection, feature engineering, and model evaluation
- Risk-based alerting, ChatOps, distributed alerting, and attack simulation