5 days ago
Responsibilities
- Monitor security events and technically analyze alerts.
- Lead information security incidents and employee insider investigations from strategy through closure.
- Serve as Incident Commander and provide updates to key stakeholders during incidents.
- Conduct digital forensic investigations and communicate findings to technical staff, executives, and legal stakeholders.
- Provide security guidance for incident response and insider-threat initiatives.
- Coordinate the development of security operations services, capabilities, integrations, and technology implementations.
- Create and maintain runbooks, automated workflows, and investigation-supporting scripts or tools.
- Mentor and train security operations engineers in data collection, analysis, and technical reporting.
- Participate in the weekend on-call rotation and support flexible EMEA-aligned operational hours.
Requirements
- At least 5 years of security incident response experience.
- Ability to communicate investigative findings and response strategies to technical staff, executive leadership, and legal stakeholders.
- Proficiency in Python for building scripts or tools supporting investigations.
- Practical experience leading security incident response, monitoring and triaging alerts, and coordinating across teams.
- Understanding of analysis and forensic techniques for macOS, Windows, and Linux.
- Experience using SIEM tools for log reviews.
- Experience with cloud architecture, cloud security, and cloud-based services, including AWS and GCP.
- Preferred: at least 2 years of experience with insider-threat initiatives or employee investigations.
- Bachelor’s or master’s degree in Computer Science, Information Security, or a related field, or relevant industry experience.
- Preferred: GIAC Certified Incident Handler or similar certification.
- Familiarity with the NIST Cybersecurity Framework, ISO 27001, and FedRAMP.
Benefits
- Flexible employee-led remote model with offices available for in-person work where operationally appropriate.
- Professional development stipend.
- Comprehensive health plans.
- Parental leave plans.
- UK location requirement with EMEA-aligned working hours and weekend on-call participation.
- Legal right to work in the specified location is required.
Tech Stack
Categories
About Samsara
Samsara (NYSE: IOT) builds with the operators who keep the world moving. Working alongside the drivers, mechanics, dispatchers, and crews behind the world's most complex operations, Samsara turns what they know into technology that makes their work safer and more efficient. Tens of thousands of organizations rely on Samsara across transportation, construction, logistics, manufacturing, field services, government, and more. Built with operators, for operators.