Security Operations Engineer I

Samsara

. Monitor, triage and investigate security alerts across identity, endpoint, email, SaaS and cloud environments .

Posted 11/6/2026full-timeRemote • California • United StatesMid-LevelSenior💰 $95,200 - $144,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in monitoring and investigating security alerts across various environments, with a strong focus on incident response and evidence collection. Proficient in scripting and automation to enhance security operations and improve detection capabilities.

Highest-signal resume keywords

Security Operations ExperienceSIEM ProficiencyIncident Response SkillsScripting in PythonClear Communication

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Alert TriageIncident InvestigationEvidence CollectionLog InterpretationThreat AnalysisNetworking ConceptsOperating System KnowledgeIdentity ConceptsAutomated WorkflowsPost-Incident Review

Soft Skills

Attention to DetailOpenness to FeedbackClear DocumentationTeam CollaborationCultural Principles Advocacy

Tools & Technologies

SIEMEndpoint Detection and Response PlatformEmail Security Platform

Industry Keywords

PhishingAccount CompromiseSuspicious Endpoint ActivitySecurity AlertsIncident Response

Tech Stack

Tools & technologies

CloudPython

About the role

Key responsibilities & impact

Monitor, triage and investigate security alerts across identity, endpoint, email, SaaS and cloud environments
Own routine investigations and incidents through documented outcomes
Gather evidence, establish timelines, assess activity and explain conclusions
Support experienced responders during major security incidents through evidence collection, technical analysis, containment and recovery actions
Maintain investigation records and provide updates and handovers to teammates across regions
Improve runbooks and tune detections
Contribute scripts and automated workflows
Participate in post-incident reviews and implement lessons learned
Champion Samsara’s cultural principles

Requirements

What you’ll need

Hands-on experience triaging and investigating security alerts in a security operations, incident response or similar role
Experience using a SIEM, endpoint detection and response platform, or email security platform
Understanding of common threats including phishing, account compromise and suspicious endpoint activity
Networking, operating system and identity concepts needed for investigations
Ability to query and interpret logs and distinguish evidence from assumptions
Some scripting experience; ability to read, adapt and write small scripts in Python or another language
Clear written and verbal communication, including documenting findings and providing handovers
Careful approach to sensitive information and openness to feedback
Ability to secure and maintain the legal right to work at the company and specified work location
A particular degree or certification is not required

Benefits

Comp & perks

Performance-based bonus/variable pay
Equity, including initial RSU grant with no vesting cliff and ongoing refresh opportunities tied to performance
Flexible, employee-led remote model
Professional development stipend
Comprehensive health plans
Parental leave plans
Above-market total compensation opportunities
Flexible working model with remote and in-person options