Staff Application Security Engineer

Overview

Lead the technical direction of Samsara's application security and vulnerability management programs across cloud services, firmware/IoT, and corporate systems.

What you'll do

• Lead the strategy, operation, and improvement of vulnerability management programs.
• Reduce mean time to remediate across the vulnerability backlog.
• Build automation and tooling for vulnerability detection and response.
• Set technical and architectural direction for security programs.
• Drive remediation with engineering teams through actionable guidance.
• Mentor engineers on secure design and remediation practices.
• Support incident investigations and critical vulnerability response on call.

What you'll need

• 10+ years of relevant cloud or security engineering experience.
• Hands-on vulnerability management across a broad enterprise environment.
• Proficiency in Go, Python, and JavaScript.
• Experience setting security program direction and driving remediation without direct authority.
• Experience with vulnerability tooling such as Wiz or Semgrep and CVSS and EPSS.
• Strong AWS background and knowledge of SAST, DAST, and SCA.
• Hands-on use of AI/LLM tooling in security workflows.

Nice to have

• Experience with C/C++ for firmware and embedded systems.
• Experience with Tines, AWS Lambda, and CI/CD security integration.
• Experience across SaaS, firmware, and corporate IT security.
• Experience in FedRAMP-certified environments.
• Experience building AI security copilots or agents.

Details

• Remote position open to candidates residing in the US.
• Full-time annual base salary is $165,200–$295,000 USD.
• Regular on-call participation is required.