Senior Security Operations Engineer

This is a fully remote position, open to applicants in Poland.

📋 Description

• Oversee security events and conduct technical analysis on alerts

• Direct information security incidents and investigations related to employee insider threats, from the development of strategies to the conclusion of incidents

• Provide updates on incidents to key stakeholders during investigations

• Offer clear and concise security guidance for incident response and insider threat initiatives

• Coordinate the development of services, capabilities, integrations, and technology implementations that support security operations, incident response, and insider threats

• Collaborate with global engineers and cross-functional teams on security initiatives

• Create and maintain runbooks and automated workflows

• Assist in refining and implementing processes

• Mentor and train security operations engineers

• Participate in an on-call rota covering weekends

• Advocate for Samsara's cultural principles as the company expands globally

⛳️ Requirements

• Over 5 years of experience in Security Incident Response

• Ability to effectively communicate investigative findings and strategies to technical personnel, executive leadership, and legal teams

• Proficient in Python for developing scripts or tools

• Capability to mentor and train security operations engineers in data collection, analysis, and reporting technical analysis

• Hands-on experience leading security incident responses, including monitoring and triaging alerts and coordinating across teams

• Knowledge of analysis and forensic techniques on macOS, Windows, and Linux

• Experience with SIEM tools for log reviews

• Background in cloud architecture and security, including AWS and GCP, as well as cloud-based services

• Experience being part of an on-call rotation and working outside of standard business hours when necessary

• Availability aligned with UK hours and the ability to work flexible hours based on team needs

• At least 2 years of experience working on insider threat initiatives or employee investigations

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field, or equivalent industry experience

• GIAC Certified Incident Handler (GCIH) or a similar certification

• Familiarity with the NIST Cybersecurity Framework, ISO 27001, and FedRAMP

🏝️ Benefits

• Competitive base salary, performance-based bonuses/variable pay, and equity for eligible positions

• Flexible, employee-driven remote work model

• Professional development stipend

• Comprehensive health insurance plans

• Parental leave options

• Flexible working arrangements

• Remote work support when aligned with operational needs