About the company
Samsara (NYSE: IOT) is the pioneer of the Connected Operations™ Cloud, a platform that enables organizations depending on physical operations to harness IoT data to develop actionable insights and improve their operations.
About the role
As a member of the Security Operations Team, you will collaborate with a global team of engineers to monitor and respond to security events, lead security incidents as Incident Commander, and lead digital forensic investigations in support of Employee Relations, Legal, Compliance, or Information Security cases.
Responsibilities
- Monitor security events and provide technical analysis on alerts
- Lead information security incidents and employee insider investigations by developing the incident response strategy, leading execution through incident closure, and providing incident updates to key stakeholders
- Deliver security guidance clearly and concisely for incident response and insider threat initiatives
- Coordinate the building of services, capabilities, integrations, and implementations of technologies to support security operations, incident response, and insider threat
- Participate in on-call rota covering weekends
Requirements
- 5+ years of experience in Security Incident Response
- Ability to communicate investigative findings and strategies to technical staff, executive leadership, and legal
- Ability to build scripts or tools to support investigation processes, with proficiency in Python
- Experience mentoring and training security operation engineers on data collection, analysis, and reporting
- Practical experience acting as a lead during security incident response, including monitoring and triaging alerts, and coordinating across teams
- Understanding of analysis and forensics techniques on macOS, Windows, and Linux
- Experience utilizing SIEM tools to perform log reviews
- Experience in cloud architecture and security (AWS, GCP) and cloud-based services
- Participation in an on-call rotation, with the potential to work outside standard business hours
Nice to have
- 2+ years of experience working on insider threat initiatives or employee investigations
- Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field
- GIAC Certified Incident Handler (GCIH) or similar certification
- Familiarity with common security frameworks and standards, including NIST Cybersecurity Framework, ISO 27001, FedRAMP