3 months ago
Responsibilities
- Monitor security events and provide technical analysis of alerts.
- Lead information security incidents and employee investigations from response strategy through closure, including stakeholder updates.
- Provide clear security guidance for incident response and insider threat initiatives.
- Coordinate the development of services, capabilities, integrations, and technology implementations supporting security operations, incident response, and insider threat.
- Create and maintain runbooks and automated workflows and help refine and implement processes.
- Mentor and train security operations engineers on data collection, analysis, and technical reporting.
- Collaborate with analysts, engineers, and stakeholders on company-wide security initiatives.
Requirements
- At least 5 years of security incident response experience.
- Ability to communicate investigative findings and strategies to technical staff, executive leadership, and legal stakeholders.
- Proficiency in Python and ability to build scripts or tools supporting investigations.
- Experience leading security incident response, including alert monitoring, triage, and cross-team coordination.
- Experience with data collection, analysis, reporting, and mentoring or training security operations engineers.
- Understanding of analysis and forensic techniques on macOS, Windows, and Linux.
- Experience using SIEM tools for log reviews.
- Experience with cloud architecture, cloud security, AWS, GCP, and cloud-based services.
- At least 3 years of insider threat initiatives or employee investigations experience is preferred.
- Bachelor’s or master’s degree in Computer Science, Information Security, or a related field, or relevant industry experience is preferred.
- GIAC Certified Incident Handler (GCIH) certification is preferred.
- Familiarity with the NIST Cybersecurity Framework, ISO 27001, and FedRAMP is preferred.
- Must reside in the Pacific, Mountain, or Central Time Zone of the United States.
Benefits
- Flexible, employee-led remote work model with offices available for in-person work where appropriate.
- Professional development stipend.
- Comprehensive health and parental leave plans.
- Applicants must reside in the Pacific, Mountain, or Central Time Zone of the United States.
Tech Stack
Categories
About Samsara
Samsara builds a Connected Operations Cloud that uses IoT hardware and software to help fleets and other physical-operations organizations monitor vehicles, assets, and worksites. Its platform spans video-based driver safety, vehicle telematics, equipment monitoring, and mobile workflows, sold as subscriptions with accompanying devices. Founded in 2015 and headquartered in San Francisco, Samsara is a public company on the NYSE (ticker: IOT) serving transportation, construction, manufacturing, field services, and government.