Security Operations Engineer

Samsara

. Monitor, triage and investigate security alerts across identity, endpoint, email, SaaS and cloud environments .

Posted 11/6/2026full-timeRemote • United KingdomMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in triaging and investigating security alerts across various environments, with strong skills in evidence collection, technical analysis, and incident response. Proficient in scripting and automation, with a focus on improving security processes and maintaining clear communication during investigations.

Highest-signal resume keywords

Security Alert InvestigationSIEM ExperiencePython ScriptingIncident ResponseThreat Hunting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security OperationsIncident ResponseLog InterpretationEvidence CollectionThreat DetectionNetworking ConceptsOperating System KnowledgeIdentity ConceptsAutomationForensic Analysis

Soft Skills

Clear CommunicationAttention to DetailOpenness to FeedbackCollaborationProblem-Solving

Tools & Technologies

SIEMEndpoint Detection and ResponseEmail Security PlatformAWSGCPSaaS ApplicationsAPIsAutomation Platforms

Industry Keywords

PhishingAccount CompromiseSuspicious Endpoint ActivityPost-Incident ReviewsRunbooksData Sources

Tech Stack

Tools & technologies

AWSCloudGoogle Cloud PlatformLinuxMacOSPython

About the role

Key responsibilities & impact

Monitor, triage and investigate security alerts across identity, endpoint, email, SaaS and cloud environments
Own routine investigations and incidents through to documented outcomes
Gather evidence, establish timelines, assess activity and explain conclusions
Support experienced responders during major security incidents through evidence collection, technical analysis, containment and recovery actions
Maintain clear investigation records and provide updates and handovers to teammates across regions
Improve runbooks, tune detections, and contribute scripts or automated workflows
Participate in post-incident reviews and turn lessons learned into practical improvements
Champion Samsara’s cultural principles

Requirements

What you’ll need

Hands-on experience triaging and investigating security alerts in a security operations, incident response or similar role
Experience using a SIEM, endpoint detection and response platform, or email security platform
Understanding of common threats such as phishing, account compromise and suspicious endpoint activity
Understanding of networking, operating system and identity concepts
Ability to query and interpret logs
Ability to distinguish evidence from assumptions and recognize when further investigation or escalation is needed
Some scripting experience; ability to read, adapt and write small scripts in Python or another language
Clear written and verbal communication, including documenting findings, explaining uncertainty and providing effective handovers
Careful approach to sensitive information
Willingness to ask for help and openness to feedback
Experience with AWS or GCP, SaaS applications, or identity systems preferred
Exposure to writing or tuning detections, threat hunting, or investigating multiple data sources preferred
Experience using Python, APIs or automation platforms preferred
Familiarity with evidence collection or forensic analysis on macOS, Windows or Linux preferred
A particular degree or certification is not required
Ability to secure and maintain the legal right to work at the company and in the specified work location

Benefits

Comp & perks

Performance-based bonus/variable pay
Equity for eligible roles
Flexible, employee-led remote model
Professional development stipend
Comprehensive health plans
Parental leave plans
Flexible working model
Remote work support where aligned with operational requirements