Sr Offensive AI Security Engineer II

Overview

Samsara is building a new Senior Offensive AI Security Engineer II role at the intersection of security engineering and applied AI, serving as the most AI-forward technologist on the Application Security team.

What you'll do

• Deliver accurate, consistent security assessments of Samsara's software, code, and firmware, evaluating their resilience against AI-driven/adversarial attacks, and implementing fixes.
• Create and translate general AI security findings into Samsara-specific fixes for the application security layer, including adapting techniques built for software to apply to hardware and embedded firmware.
• Find both AI-specific and traditional vulnerabilities (e.g., injection, IDOR) using AI-driven offensive validation.
• Build and pressure-test novel AI-enabled security tooling and workflows, then drive adoption of what proves valuable across the broader security org.
• Benchmark each new frontier model against the previous one for security tasks, and build the release criteria and guardrails for adopting it.
• Support AppSec vulnerability triage through an office-hours rotation, and help run the bug bounty program, with potential expansion to hardware.
• Partner cross-functionally with engineering, hardware, and leadership.
• Present findings to security and executive leadership as Samsara's go-to expert on AI-related security risk.
• Help define and drive Samsara's medium- and long-term strategy for adopting AI safely and effectively within security operations.
• Use frontier AI/LLM tools (e.g., Anthropic's and OpenAI's cybersecurity-specific programs) hands-on for both offensive validation (red-teaming our own systems) and defensive tooling.
• Champion, role model, and embed Samsara's cultural principles (Focus on Customer Success, Build for the Long Term, Adopt a Growth Mindset, Be Inclusive, Win as a Team) as the company scales globally and across new offices.

What you'll need

• 8+ years of experience in application security, vulnerability management, threat modeling, offensive security, or a closely related discipline, with demonstrated application fix impact and influence across a large part of an organization.
• Required experience integrating, securing, or red-teaming AI-enabled systems (e.g., LLMs, agentic workflows, prompt injection/adversarial testing).
• Hands-on experience building AI or agentic workflows for security use cases.
• Experience conducting technical security assessments (e.g., offensive security or validation exercises) across both software and hardware/firmware environments.
• Experience creating solutions for secure code with engineers using languages such as GoLang.
• Experience developing AI and agentic solutions using GitHub, and developing within AWS cloud.

Nice to have

• Experience with AI-specific attack techniques (prompt injection, jailbreaks, model/agent abuse) for vulnerability management and application security.
• Experience building or validating security controls for agentic AI, RAG systems, or LLM-integrated platforms.
• Experience red-teaming LLM-enabled systems (prompt injection, agent abuse).
• Experience evaluating or benchmarking LLMs.
• Bug bounty platform experience (e.g., Bugcrowd).
• Experience in federal or FedRAMP-style environments.
• A track record of driving org-wide security strategy or presenting technical findings to senior/executive stakeholders.
• Relevant industry certifications (e.g., OSCP, GIAC, CISSP) or AWS certifications.

Details

• Remote role open to candidates residing in the US, excluding the San Francisco Bay Metro Area, NYC Metro Area, and Washington, D.C. Metro Area.
• Annual base salary range: $157,675 — $238,500 USD, varying by approved pay zone, city of residence, job-related knowledge, skills, and experience.
• Eligible for an initial RSU grant with no vesting cliff, and ongoing refresh opportunities tied to performance, subject to plan terms and conditions.