Sr Offensive AI Security Engineer II

Overview

Samsara is seeking a Sr Offensive AI Security Engineer II to join the Application Security team as its most AI-forward technologist, using frontier AI models to find vulnerabilities across cloud, software and firmware and to build guardrails for adopting AI safely.

What you'll do

• Deliver accurate, consistent security assessments of Samsara's software, code and firmware, evaluating resilience against AI-driven and adversarial attacks, and implement fixes.
• Translate general AI security findings into Samsara-specific fixes for the application security layer, adapting software techniques to hardware and embedded firmware.
• Find both AI-specific and traditional vulnerabilities (e.g., injection, IDOR) using AI-driven offensive validation.
• Build and pressure-test novel AI-enabled security tooling and workflows, and drive adoption of what proves valuable across the security org.
• Benchmark each new frontier model against the previous one for security tasks, and build the release criteria and guardrails for adopting it.
• Support AppSec vulnerability triage through an office-hours rotation, and help run the bug bounty program, with potential expansion to hardware.
• Partner cross-functionally with engineering, hardware and leadership.
• Present findings to security and executive leadership as Samsara's go-to expert on AI-related security risk.
• Help define and drive Samsara's medium- and long-term strategy for adopting AI safely and effectively within security operations.
• Use frontier AI/LLM tools hands-on for offensive validation (red-teaming Samsara's own systems) and defensive tooling.
• Champion, role model and embed Samsara's cultural principles as the company scales globally.

What you'll need

• 8+ years of experience in application security, vulnerability management, threat modeling, offensive security, or a closely related discipline, with demonstrated application fix impact and influence across a large part of an organization.
• Required experience integrating, securing, or red-teaming AI-enabled systems (e.g., LLMs, agentic workflows, prompt injection/adversarial testing).
• Hands-on experience building AI or agentic workflows for security use cases.
• Experience conducting technical security assessments (e.g., offensive security or validation exercises) across both software and hardware/firmware environments.
• Experience creating solutions for secure code with engineers using languages such as GoLang.
• Experience developing AI and agentic solutions using GitHub, and developing within AWS cloud.

Nice to have

• Experience with AI-specific attack techniques (prompt injection, jailbreaks, model/agent abuse) for vulnerability management and application security.
• Experience building or validating security controls for agentic AI, RAG systems, or LLM-integrated platforms.
• Experience red-teaming LLM-enabled systems (prompt injection, agent abuse).
• Experience evaluating or benchmarking LLMs.
• Bug bounty platform experience (e.g., Bugcrowd).
• Experience in federal or FedRAMP-style environments.
• A track record of driving org-wide security strategy or presenting technical findings to senior/executive stakeholders.
• Relevant industry certifications (e.g., OSCP, GIAC, CISSP) or AWS certifications.

Details

• Remote role open to candidates residing in the US, excluding the San Francisco Bay Metro Area, NYC Metro Area, and Washington, D.C. Metro Area.
• Annual base salary range of $157,675 to $238,500 USD, varying by approved pay zone and factors including city of residence, skills and experience.
• Eligible for an initial RSU grant with no vesting cliff, and ongoing refresh opportunities tied to performance.