Senior Security Engineer - Threat Detection

Seattle · CA · USD 157,675-238,500 / year · 6+ years experience · Remote · Posted Sep 28, 2026

At a glance

The Senior Threat Detection Engineer will build and operate the signals, pipelines, and tooling used to discover threats against Samsara and its customers.
This hands-on role involves owning the end-to-end detection platform, including data pipelines, detection content, CI/CD processes, and AI-assisted tooling.
The engineer will work closely with Security Operations, Application Security, and Enterprise Security teams to develop and deploy detection-as-code.

Build, deploy, and improve MITRE ATT&CK–aligned detections across cloud, endpoint, identity, email, and application telemetry.
Manage the full detection lifecycle from hypothesis and data validation to deployment, tuning, and retirement.
Advance the detection-as-code platform using version control, peer review, automated testing, and CI/CD.
Identify emerging threat surfaces and build integrations to strengthen data ingestion and enrichment.
Evaluate AI-powered security capabilities, including secure MCP integrations, threat hunting, and response automation.
Convert threat intelligence into actionable detection and retrospective scanning.
Partner with Security Operations on investigations, incidents, table top exercises, and code pairing.

6+ years in security engineering, detection engineering, or a related technology discipline.
Strong Python and SQL skills with experience analyzing large datasets.
Hands-on experience with detection-as-code, Git-based workflows, automated testing, and CI/CD deployment.
Deep experience with modern SIEM platforms, including data onboarding, advanced queries, and dashboards.
Working knowledge of AWS, Linux, containers, and EDR.
Proven ability to build systems from scratch and lead projects independently.
Ability to communicate technical concepts clearly through documentation, RFCs, and presentations.

Experience with data orchestration platforms such as Airflow or Databricks.
Applied experience with LLMs, agentic frameworks, and MCP integrations.
Experience with behavioral analytics, anomaly detection, feature engineering, and model evaluation.
Familiarity with risk-based alerting, ChatOps, distributed alerting, and attack simulation.
Experience with Go, Terraform, malware analysis, digital forensics, or FedRAMP environments.

Show all 14 skills