Senior Security Engineer – Threat Detection

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop, implement, and consistently enhance MITRE ATT&CK-aligned detection mechanisms across cloud environments, endpoints, identity systems, email, and application telemetry.

• Manage the entire detection lifecycle, encompassing hypothesis formulation, data validation, deployment, tuning, validation, and eventual retirement.

• Propel the detection-as-code platform forward by utilizing version control, engaging in peer reviews, conducting automated testing, ensuring CI/CD, and enhancing pipeline reliability and observability.

• Recognize emerging threat surfaces and create integrations for data ingestion, enrichment, and comprehensive coverage.

• Assess AI-enhanced security functionalities, including secure MCP integrations, threat hunting, anomaly detection, and automation in response.

• Transform threat intelligence into practical detection methods and conduct retrospective scanning.

• Collaborate with Security Operations during investigations, incident responses, tabletop exercises, detection upkeep, and coding partnerships.

• Report directly to the Director of Threat Detection and Response.

• Work in conjunction with Security Operations, Application Security, Enterprise Security, and various engineering teams across the organization.

• Advocate for and integrate Samsara’s cultural principles as the company expands globally and establishes new offices.

⛳️ Requirements

• Over 6 years of experience in security engineering, detection engineering, or a related technical field.

• Proficient in Python and SQL.

• Experience in analyzing large datasets to construct and validate detections.

• Practical experience with detection-as-code methodologies, Git-based workflows, automated testing, and CI/CD deployments.

• Extensive experience with contemporary SIEM platforms, including data onboarding, advanced query writing, dashboard creation, and threat intelligence enrichment.

• Familiarity with AWS, Linux, containerization, and EDR technologies.

• Capable of building systems from the ground up, leading projects autonomously, rapidly acquiring new technological skills, and articulating technical concepts clearly through documentation, RFCs, and presentations.

• Experience with data orchestration platforms like Airflow or Databricks.

• Applied knowledge of LLMs, agentic frameworks, and MCP integrations, including their associated security risks and potential failure modes.

• Proficiency in behavioral analytics, anomaly detection, feature engineering, and model assessment.

• Understanding of risk-based alerting, ChatOps, distributed alerting, and attack simulation methodologies.

• Additional skills in Go, Terraform, malware analysis, digital forensics, or familiarity with FedRAMP environments.

• Must reside within the United States, except for the San Francisco Bay Metro Area, NYC Metro Area, and Washington, D.C. Metro Area.

• Must possess and maintain the legal authorization to work at Samsara and in the designated work location.

🏝️ Benefits

• Initial RSU grant with no vesting cliff.

• Continuous refresh opportunities based on performance.

• Performance-driven bonus or variable pay.

• Equity options available for eligible positions.

• Flexible, employee-led remote work model.

• Professional development stipend provided.

• Comprehensive health insurance plans offered.

• Parental leave programs available.

• Flexible working arrangements.

• Support for remote work setups.

• Option for in-person office attendance.