17 hours ago
Base Salary
$158k - $239k/yr
Responsibilities
- Build, deploy, tune, validate, and retire MITRE ATT&CK-aligned detections across cloud, endpoint, identity, email, and application telemetry.
- Own detection hypotheses, data validation, baselining, deployment, false-positive thresholds, and production measurement.
- Advance the detection-as-code platform through Git-based version control, peer review, automated testing, CI/CD, pipeline reliability, and observability.
- Build integrations for data ingestion, enrichment, threat intelligence, retrospective scanning, and coverage across internal and third-party systems.
- Evaluate AI-powered security capabilities, including secure MCP integrations, threat hunting, anomaly detection, and response automation.
- Partner with Security Operations during investigations, incidents, tabletop exercises, detection maintenance, and code pairing.
Requirements
- 6+ years of experience in security engineering, detection engineering, or a related technology discipline.
- Strong Python and SQL skills with experience analyzing large datasets to build and validate detections.
- Hands-on experience with detection-as-code, Git-based workflows, automated testing, and CI/CD deployment.
- Deep experience with modern SIEM platforms, including data onboarding, advanced queries, dashboards, and threat intelligence enrichment.
- Working knowledge of AWS, Linux, containers, and EDR.
- Ability to build systems from scratch, lead projects independently, learn technologies quickly, and communicate technical concepts through documentation, RFCs, and presentations.
- Preferred experience with Airflow or Databricks, LLMs, agentic frameworks, MCP integrations, behavioral analytics, anomaly detection, feature engineering, model evaluation, risk-based alerting, ChatOps, distributed alerting, attack simulation, Go, Terraform, malware analysis, digital forensics, or FedRAMP environments.
Benefits
- Annual base salary range is $157,675—$238,500 USD, with eligibility for an initial RSU grant and ongoing refresh opportunities tied to performance.
- Flexible employee-led remote model with offices available for employees who prefer in-person work; this role is open to US candidates except the San Francisco Bay Metro Area, NYC Metro Area, and Washington, D.C. Metro Area.
- Performance-based bonus or variable pay and equity may be available for eligible roles.
- Professional development stipend, comprehensive health plans, parental leave, and other total rewards are provided.
About Samsara
Samsara builds a Connected Operations Cloud that uses IoT hardware and software to help fleets and other physical-operations organizations monitor vehicles, assets, and worksites. Its platform spans video-based driver safety, vehicle telematics, equipment monitoring, and mobile workflows, sold as subscriptions with accompanying devices. Founded in 2015 and headquartered in San Francisco, Samsara is a public company on the NYSE (ticker: IOT) serving transportation, construction, manufacturing, field services, and government.