8 hours ago
Base Salary
$203k - $239k/yr
Responsibilities
- Build and continuously improve MITRE ATT&CK-aligned detections across cloud, endpoint, identity, email, and application telemetry.
- Own the detection lifecycle from hypothesis, data validation, and baselining through deployment, tuning, validation, and retirement.
- Advance the detection-as-code platform through version control, peer review, automated testing, CI/CD, reliability improvements, and observability.
- Build integrations for data ingestion, enrichment, threat intelligence, retrospective scanning, and coverage across internal and third-party systems.
- Evaluate AI-powered security capabilities, including MCP integrations, threat hunting, anomaly detection, and response automation.
- Partner with Security Operations on investigations, incidents, tabletop exercises, detection maintenance, and code pairing.
Requirements
- 6+ years of experience in security engineering, detection engineering, or a related technology discipline.
- Strong Python and SQL skills, including analysis of large datasets to build and validate detections.
- Hands-on experience with detection-as-code, Git-based workflows, automated testing, and CI/CD deployment.
- Deep experience with modern SIEM platforms, including data onboarding, advanced queries, dashboards, and threat intelligence enrichment.
- Working knowledge of AWS, Linux, containers, and EDR.
- Ability to build systems from scratch, lead projects independently, learn technologies quickly, and communicate technical concepts through documentation, RFCs, and presentations.
- Preferred qualifications include experience with Airflow or Databricks, LLMs, agentic frameworks, MCP integrations, behavioral analytics, anomaly detection, feature engineering, model evaluation, risk-based alerting, ChatOps, distributed alerting, attack simulation, Go, Terraform, malware analysis, or FedRAMP environments.
Benefits
- Flexible employee-led remote work model; this role is open to US candidates except those in the San Francisco Bay, New York City, and Washington, D.C. metro areas.
- Professional development stipend, comprehensive health plans, parental leave, performance-based bonus or variable pay, and equity eligibility.
- The role includes an initial RSU grant with no vesting cliff and ongoing refresh opportunities tied to performance, subject to plan terms.
About Samsara
Samsara builds a Connected Operations Cloud that uses IoT hardware and software to help fleets and other physical-operations organizations monitor vehicles, assets, and worksites. Its platform spans video-based driver safety, vehicle telematics, equipment monitoring, and mobile workflows, sold as subscriptions with accompanying devices. Founded in 2015 and headquartered in San Francisco, Samsara is a public company on the NYSE (ticker: IOT) serving transportation, construction, manufacturing, field services, and government.