Senior Security Engineer - Enterprise Security

About the role:

The Senior Security Engineer II - Enterprise Security is responsible for building, operating, and maintaining Samsara’s core security infrastructure. You will collaborate with a global team of engineers to help build a world-class security engineering program utilizing modern principles across corporate infrastructure.

You take security seriously and strive to build low-friction solutions developed in close partnership with others. You are passionate about building automated alerting and response capabilities and helping to drive insights around potentially malicious activity within production environments. You enjoy building tools and workflows from scratch, maintaining active programs, and threading security into company processes to meet business needs. You will use your familiarity with a diverse set of technologies and practices to build a leading program in our industry. You enjoy teaching and supporting team members, and helping junior engineers develop their skills and security instincts.

This is a remote role open to candidates residing in Canada. Relocation assistance will not be provided for this role.

You should apply if:

• You want to impact the industries that run our world: Your efforts will result in real-world impact—helping to keep the lights on, get food into grocery stores, reduce emissions, and most importantly, ensure workers return home safely.
• You are the architect of your own career: If you put in the work, this role won’t be your last at Samsara. We set up our employees for success and have built a culture that encourages rapid career development, countless opportunities to experiment and master your craft in a hyper growth environment.
• You’re energized by our opportunity: The vision we have to digitize large sectors of the global economy requires your full focus and best efforts to bring forth creative, ambitious ideas for our customers.
• You want to be with the best: At Samsara, we win together, celebrate together and support each other. You will be surrounded by a high-calibre team that will encourage you to do your best. 

In this role, you will: 

• Own and drive execution of multiple key enterprise security systems, ensuring they are well-integrated, documented, and effectively support Samsara’s security goals.
• Write clear, concise documentation and runbooks for enterprise security workflows.
• Collaborate with partners across Engineering, IT, and Security to ensure proper implementation of security tools and policies.
• Occasionally assist the Security Operations team during security investigations, acting as a technical subject matter expert within your domain.
• Partner with engineering teams to triage and support remediation of vulnerabilities and misconfigurations in systems and applications.
• Mentor engineers in the Security team to grow their domain knowledge, tool-specific skills, and communication abilities.
• Champion, role model, and embed Samsara’s cultural principles (Focus on Customer Success, Build for the Long Term, Adopt a Growth Mindset, Be Inclusive, Win as a Team) as we scale globally and across new offices.

Minimum requirements for the role:

• 8+ years of relevant experience with demonstrated impact and influence across a large part of an organization, with 5+ years in an Enterprise Security specific role.
• Deep expertise in enterprise security engineering best practices.
• Strong scripting skills with Python, including experience building tools and automations.
• Demonstrated experience building, integrating, and maintaining enterprise security tools.
• Strong familiarity with common security problems and the ability to independently judge their severity and impact on the business.
• Hands-on experience with automation tools (e.g., Tines, AWS Lambda) and common security platforms (e.g., Crowdstrike, Zscaler, Wiz).
• Track record of delivering large scope, impactful work across multiple quarters and collaborating effectively across teams.

An ideal candidate also has:

• Experience driving efforts around least privilege, just-in-time access management, identity lifecycle management, and data loss prevention.
• A history of building out security programs using modern SaaS platforms such as Zscaler, Crowdstrike, Wiz, Splunk, and other tools.
• Experience with infrastructure as code deployments using Terraform.