Senior Security Engineer - SIEM

About the role:

We’re seeking a talented Senior Security Engineer with hands-on experience deploying, managing, and operating modern security information and event management frameworks. The right candidate will be knowledgeable in SIEM frameworks and their impact on cross-functional teams, passionate about detecting security threats, enthusiastic about driving the implementation of a key area in the detection and response pipeline, and thrive in a fast-paced environment. You’ll work alongside technical product managers and security engineers passionate about building highly scalable products. Your contributions will be critical to shaping our overall security and compliance strategy.

You should apply if:

• You want to impact the industries that run our world: Your efforts will result in real-world impact—helping to keep the lights on, get food into grocery stores, reduce emissions, and, most importantly, ensure workers return home safely.
• You are the architect of your own career: If you put in the work, this role won’t be your last at Samsara. We set up our employees for success and have built a culture that encourages rapid career development and countless opportunities to experiment and master your craft in a hyper-growth environment.
• You’re energized by our opportunity: Our vision to digitize large sectors of the global economy requires your full focus and best efforts to bring forth creative, ambitious ideas for our customers.
• You want to be with the best: At Samsara, we win together, celebrate together and support each other. You will be surrounded by a high-caliber team that will encourage you to do your best. 

Click here to learn about what we value at Samsara. 

In this role, you will: 

• Lead Samsara’s SIEM efforts, including managing the overall platform, integrating log collection across multiple tools, and working with Samsara’s Security Operations team to build detection patterns and alerts.
• Build dashboards and data visualizations of Samsara’s logging and metrics data.
• Design and implement role-based access controls to ensure appropriate access to data within Samsara’s SIEM solution.
• Document and present results to various target audiences, ranging from highly technical engineers over non-technical subject matter experts to executive leadership.
• Contribute to developing tools and automation programs, security analysis, and testing automation projects.
• Champion, role model, and embed Samsara’s cultural principles (Focus on Customer Success, Build for the Long Term, Adopt a Growth Mindset, Be Inclusive, and Win as a Team) as we scale globally and across new offices
• Work across multiple organizations to ingest new logs and capabilities in to our threat detection framework

Minimum requirements for the role:

• Significant (4+ years) experience deploying, managing, and operating Splunk in support of a technical security organization.
• Splunk experience ingesting data, writing advanced queries, and building dashboards.
• Familiarity with modern threat detection principles and experience collaborating with threat detection and response organizations.
• Track record of building least-privilege based access controls within Splunk.
• Strong development background with experience in Python or Go. Familiarity with SQL
• Exposure to core security tooling such as Okta, Zscaler, Crowdstrike, and other tools. 

An ideal candidate also has the following:

• Advanced-level Splunk certification (Splunk Core Advanced Power User, Splunk Cloud Certified Admin, etc). 
• Cloud certifications (CCP, SAA, SAP, AWS Security Specialty, etc.) or equivalent. 
• Prior experience implementing a SIEM in a FedRAMP environment