Description
Samsara is building a new role at the intersection of security engineering and applied AI. You'll be the most AI-forward technologist on our Application Security team. You'll use frontier AI models to find vulnerabilities across our cloud, software, and firmware before attackers do. You'll also evaluate each new model for security use and help build the guardrails for adopting AI safely.
Responsibilities:
- Deliver accurate, consistent security assessments of Samsara's software, code, and firmware, evaluating their resilience against AI-driven/adversarial attacks, and implementing fixes.
- Create and translate general AI security findings into Samsara-specific fixes for our application security layer,including adapting techniques built for software to apply to hardware and embedded firmware.
- Find both AI-specific and traditional vulnerabilities (e.g., injection, IDOR) using AI-driven offensive validation.
- Build and pressure-test novel AI-enabled security tooling and workflows, then drive adoption of what proves valuable across the broader security org.
- Benchmark each new frontier model against the previous one for security tasks, and build the release criteria and guardrails for adopting it.
- Support AppSec vulnerability triage through an office-hours rotation, and help run our bug bounty program, with potential expansion to hardware.
- Partner cross-functionally with engineering, hardware, and leadership. Present findings to security and executive leadership as Samsara's go-to expert on AI-related security risk.
- Help define & drive Samsara's medium- and long-term strategy for adopting AI safely and effectively within security operations.
- Use frontier AI/LLM tools (e.g., Anthropic's and OpenAI's cybersecurity-specific programs) hands-on for both offensive validation (red-teaming our own systems) and defensive tooling.
Requirements:
- 8+ years of experience in application security, vulnerability management, threat modeling, offensive security, or a closely related discipline, with demonstrated application fix impact and influence across a large part of an organization.
- Hands-on experience building AI or agentic workflows for security use cases.
- Experience conducting technical security assessments (e.g. offensive security or validation exercises) across both software and hardware/firmware environments.
- Experience in creating solutions for secure code with engineers using languages such as GoLang.
- Experience developing AI and agentic solutions using Github, and developing within AWS cloud.
Benefits:
- Flexible working model
- Professional development stipend
- Comprehensive health and parental leave plans
- Equity (for eligible roles)
- Performance-based bonus/variable pay
- Above-market total compensation