Senior Security Operations Engineer

Poland · United Kingdom · 5+ years experience · Posted Oct 14, 2026

At a glance

As a member of our Security Operations Team, you will collaborate with a global team of engineers to monitor and respond to security events, lead security incidents as Incident Commander, and lead digital forensic investigations.
You will also have the opportunity to create and maintain runbooks, and automated workflows, and assist in process refinement and implementation.

Monitor security events and provide technical analysis on alerts
Lead information security incidents and employee insider investigations by developing the incident response strategy, lead the execution through incident closure, while providing incident updates to key stakeholders throughout the incident
Deliver security guidance clearly and concisely for incident response and insider threat initiatives
Coordinate the building of services, capabilities, integrations, and implementations of technologies to support security operations, incident response, and insider threat
Champion, role model, and embed Samsara’s cultural principles as we scale globally and across new offices
Participate in our on-call rota covering weekends

5+ years of experience in Security Incident Response
Ability to communicate investigative findings and strategies to technical staff, executive leadership, and legal
Ability to build scripts or tools to support Samsara’s investigation processes, with proficiency in Python
Mentor and train security operation engineers on data collection, analysis, and reporting technical analysis
Practical experience acting as a lead during security incident response, including monitoring and triaging alerts, and coordinating across teams
Understanding of analysis and forensics techniques on macOS, Windows, and Linux
Experience utilizing SIEM tools to perform log reviews
Experience in cloud architecture and security (AWS, GCP) and cloud-based services
Participation in an on-call rotation, with the potential to work outside standard business hours, including late evenings, when responding to high-severity incidents as part of our global incident response team
This role will be part of our EMEA so your hours will be aligned to the UK. As an operational time you may be expected to work flexible hours around this to support the load of the team

2+ years of experience working on insider threat initiatives or employee investigations
Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field - or relevant industry experience
GIAC Certified Incident Handler (GCIH) or similar Certification
Familiarity with common security frameworks and standards, including NIST Cybersecurity Framework, ISO 27001, FedRAMP