Security Operations Engineer I

As a Security Operations Engineer at Samsara, you will join a global team dedicated to protecting people, systems, and information. You will triage and investigate security alerts, run incident response efforts, and help improve tools, runbooks, and automated workflows. Responsibilities: Monitor, triage, and investigate security alerts across identity, endpoint, email, SaaS, and cloud environments. Own routine investigations and incidents through to a documented outcome. Support experienced responders during major security incidents. Maintain clear investigation records and provide useful updates and handovers to teammates. Improve runbooks, help tune detections, and contribute small scripts or automated workflows. Participate in post-incident reviews and turn lessons learned into practical improvements. Requirements: Hands-on experience triaging and investigating security alerts in a security operations or incident response role. Experience using security tools such as a SIEM, endpoint detection and response platform, or email security platform. Understanding of common threats and networking, operating system, and identity concepts. Ability to query and interpret logs, distinguish evidence from assumptions, and recognize when further investigation or escalation is needed. Some scripting experience in Python or another language. Clear written and verbal communication. Nice to have: Experience investigating activity in cloud platforms, SaaS applications, or identity systems. Exposure to writing or tuning detections, threat hunting, or investigating activity across multiple data sources. Experience using Python, APIs, or automation platforms to improve a security workflow. Familiarity with evidence collection or forensic analysis on macOS, Windows, or Linux. Job Data by YubHub .