Security Operations Engineer

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Oversee, prioritize, and investigate security alerts across identity, endpoint, email, SaaS, and cloud environments

• Take ownership of routine investigations and incidents until documented outcomes are reached

• Collect evidence, establish timelines, evaluate activity, and articulate conclusions

• Assist senior responders during significant security incidents by gathering evidence, conducting technical analysis, and facilitating containment and recovery measures

• Maintain thorough investigation records and provide updates as well as handovers to colleagues across different regions

• Enhance runbooks, refine detections, and contribute scripts or automated workflows

• Engage in post-incident reviews and transform lessons learned into actionable improvements

• Advocate for Samsara’s cultural principles

⛳️ Requirements

• Practical experience in triaging and investigating security alerts within a security operations, incident response, or similar capacity

• Familiarity with a SIEM, endpoint detection and response platform, or email security platform

• Knowledge of common threats, including phishing, account compromise, and suspicious endpoint activity

• Understanding of networking, operating system, and identity concepts

• Proficiency in querying and interpreting logs

• Capability to differentiate between evidence and assumptions and to identify when further investigation or escalation is necessary

• Some experience with scripting; ability to read, modify, and create small scripts in Python or another language

• Strong written and verbal communication skills, including documenting findings, clarifying uncertainties, and providing effective handovers

• Meticulous approach to handling sensitive information

• Willingness to seek assistance and openness to constructive feedback

• Experience with AWS or GCP, SaaS applications, or identity systems is preferred

• Exposure to writing or refining detections, threat hunting, or investigating multiple data sources is preferred

• Experience using Python, APIs, or automation platforms is preferred

• Familiarity with evidence collection or forensic analysis on macOS, Windows, or Linux is preferred

• A specific degree or certification is not mandatory

• Ability to secure and maintain the legal right to work at the company and in the designated work location

🏝️ Benefits

• Performance-based bonus/variable pay

• Equity for eligible roles

• Flexible, employee-led remote work model

• Professional development stipend

• Comprehensive health plans

• Parental leave plans

• Flexible working model

• Remote work support aligned with operational requirements