Senior Security Engineer - Threat Detection

About the role:

Samsara Security is looking for a Senior Threat Detection Engineer. This is a development and operations role where you will be responsible for building, deploying, and maintaining a robust threat detection and alerting pipeline. You will report to the Director of Information Security and collaborate with a global team of engineers to build a world-class security program.

We seek an individual who is passionate about building custom tools using open-source technologies, enjoys leveraging automation to enhance efficiency, and is enthusiastic about working with infrastructure-as-code and serverless technologies. As an early hire, you will play a critical role in shaping the direction of our threat infrastructure.

You should apply if:

• You want to impact the industries that run our world: Your efforts will result in real-world impact—helping to keep the lights on, get food into grocery stores, reduce emissions, and most importantly, ensure workers return home safely.
• You are the architect of your own career: If you put in the work, this role won’t be your last at Samsara. We set up our employees for success and have built a culture that encourages rapid career development, countless opportunities to experiment and master your craft in a hyper growth environment.
• You’re energized by our opportunity: The vision we have to digitize large sectors of the global economy requires your full focus and best efforts to bring forth creative, ambitious ideas for our customers.
• You want to be with the best: At Samsara, we win together, celebrate together and support each other. You will be surrounded by a high-caliber team that will encourage you to do your best. 

Click here to learn about what we value at Samsara. 

In this role, you will: 

• Contribute to the detection and alerting pipeline so that our Security Operations team can quickly identify and remediate potential security threats.
• Improve availability, maintainability, and reliability of the detection pipeline.
• Establish metrics to measure the effectiveness of the detection pipeline.
• Develop security-focused tools and services in support of intelligence, detection, and response.
• Build a deployment (CI/CD) pipeline using GitHub, Terraform, and AWS.
• Contribute to the long-term strategy and vision of the team.
• Drive concurrent projects while maintaining operational responsibilities.
• Work closely with other teams, such as Business Technology, Legal, Product Security, Security Operations, Security Engineering, and Product Engineering.
• Mentor Security Operations Analysts, including investigation support, project work, and code pairing.

• Champion, role model, and embed Samsara’s cultural principles (Focus on Customer Success, Build for the Long Term, Adopt a Growth Mindset, Be Inclusive, Win as a Team) as we scale globally and across new offices.

Minimum requirements for the role:

• Deep subject matter expertise with security engineering best practices.
• Strong development background with experience in Python and SQL.
• Strong DevOps/SRE background with experience in AWS, Terraform, containers, and GitHub,
• Significant Splunk experience ingesting data, writing advanced queries, and building dashboards.
• Significant (4+ years) experience performing security engineering in the technology sector.

An ideal candidate also has the following:

• Experience with detections-as-code, risk-based alerting, ChatOps, and distributed alerting
• Experience creating APIs/libraries to interact with internal systems
• Familiar with threat detection/hunting/modeling and MITRE ATT&CK framework
• Familiar with incident response in AWS, SaaS, MacOS, and Linux
• Experience with EDR tools for host and container monitoring and SOAR for automation
• Experience with data science and warehouse tooling
• Experience with attack simulation frameworks to develop new and validate existing detections