Who we are
Samsara (NYSE: IOT) is the pioneer of the Connected Operations™ Cloud, which is a platform that enables organizations that depend on physical operations to harness Internet of Things (IoT) data to develop actionable insights and improve their operations. At Samsara, we are helping improve the safety, efficiency and sustainability of the physical operations that power our global economy. Working at Samsara means you’ll help define the future of physical operations and be on a team that’s shaping an exciting array of product solutions, including Video-Based Safety, Vehicle Telematics, Apps and Driver Workflows, and Equipment Monitoring.
About the role
As a member of our Security Operations Team, you will collaborate with a global team of engineers to monitor and respond to security events, lead security incidents as Incident Commander, and lead digital forensic investigations in support of Employee Relations, Legal, Compliance, or Information Security cases. Although you will be focused on security incident response, you will also have the opportunity to create and maintain runbooks, and automated workflows, and assist in process refinement and implementation. You will collaborate with a diverse team of engineers, and key stakeholders on security initiatives across the company.
In this role, you will:
- Monitor security events and provide technical analysis on alerts
- Lead information security incidents and employee insider investigations by developing the incident response strategy, lead the execution through incident closure, while providing incident updates to key stakeholders throughout the incident
- Deliver security guidance clearly and concisely for incident response and insider threat initiatives
- Coordinate the building of services, capabilities, integrations, and implementations of technologies to support security operations, incident response, and insider threat
- Champion, role model, and embed Samsara’s cultural principles (Focus on Customer Success, Build for the Long Term, Adopt a Growth Mindset, Be Inclusive, Win as a Team) as we scale globally and across new offices
- Participate in our on-call rota covering weekends
Total Rewards
Our compensation program delivers above-market total compensation through a combination of base salary, performance-based bonus/variable pay, and equity (for eligible roles) in a high-growth public company. We meaningfully differentiate pay for our top performers, who have the opportunity to earn above-market compensation that can outpace the broader market over time.
Benefits
Beyond compensation, we provide the foundations that enable long-term success: a flexible, employee-led remote model, a professional development stipend, comprehensive health and parental leave plans, and more. At Samsara, we embrace a flexible working model that caters to the diverse needs of our teams.
Minimum requirements for the role:
- 5+ years of experience in Security Incident Response
- Ability to communicate investigative findings and strategies to technical staff, executive leadership, and legal
- Ability to build scripts or tools to support Samsara’s investigation processes, with proficiency in Python
- Mentor and train security operation engineers on data collection, analysis, and reporting technical analysis
- Practical experience acting as a lead during security incident response, including monitoring and triaging alerts, and coordinating across teams
- Understanding of analysis and forensics techniques on macOS, Windows, and Linux
- Experience utilizing SIEM tools to perform log reviews
- Experience in cloud architecture and security (AWS, GCP) and cloud-based services
- Participation in an on-call rotation, with the potential to work outside standard business hours, including late evenings, when responding to high-severity incidents as part of our global incident response team.
- This role will be part of our EMEA so your hours will be aligned to the UK. As an operational time you may be expected to work flexible hours around this to support the load of the team
An ideal candidate also has:
- 2+ years of experience working on insider threat initiatives or employee investigations
- Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field - or relevant industry experience
- GIAC Certified Incident Handler (GCIH) or similar Certification
- Familiarity with common security frameworks and standards, including NIST Cybersecurity Framework, ISO 27001, FedRAMP
