Description
Samsara, a recently public company listed on the NYSE under the ticker symbol IOT, is the pioneer of the Connected Operations™ Cloud. This platform enables organizations that depend on physical operations to harness Internet of Things (IoT) data to develop actionable insights and improve their operations. Samsara's mission is to help improve the safety, efficiency, and sustainability of the physical operations that power our global economy, representing more than 40% of global GDP.
As a Staff Application Security Engineer, you will drive the overarching technical direction for our application security and vulnerability management programs. This is a high-visibility role where you'll influence a broad surface area while retaining the flexibility to dive deep into critical domain focus areas as security priorities evolve.
Key Responsibilities:
- Lead the ongoing strategy, operation, and continuous improvement of Samsara's vulnerability management program, along with other core application security programs.
- Own and drive down mean time to remediate (MTTR) across the vulnerability backlog, as SLAs tighten.
- Build and champion automation and tooling that scale vulnerability detection and response across cloud, firmware/IoT, and corporate systems.
- Set technical and architectural direction for the program, translating leadership's strategic priorities into a concrete execution plan for the team.
- Drive remediation by building trust with engineering teams and providing clear, actionable guidance.
- Mentor and level up other engineers on secure design and remediation practices.
- Communicate risk and remediation tradeoffs to engineering leadership in terms they can act on.
- Participate in security incident investigations involving high-profile vulnerabilities.
- Be regularly on call to support critical vulnerability response.
Requirements:
- 10+ years of relevant experience as a cloud engineer or security engineer, including hands-on vulnerability management across a broad, multi-product enterprise environment.
- Proficiency in Go, Python, and JavaScript.
- Demonstrated ability to independently set technical and architectural direction for a security program.
- Significant experience with modern vulnerability management tooling and deep familiarity with vulnerability scoring frameworks.
- Strong AWS cloud services background.
- Deep understanding of Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).
- Hands-on use of AI/LLM tooling in your own security workflow.
Nice to Have:
- Experience with C/C++.
- Background at a cloud-native, AI-forward company.
- Experience with security automation platforms and serverless frameworks.
- Experience integrating vulnerability management into modern CI/CD pipelines.
- Experience spanning SaaS, firmware, and corporate IT security programs.
Compensation: The annual base salary for this position ranges from $165,200 to $295,000 USD. This role is also eligible for an initial RSU grant and ongoing refresh opportunities tied to performance.