Description
Samsara, a recently public company listed on the NYSE under the ticker symbol IOT, is seeking a Staff Application Security Engineer to join its team. This role involves driving the technical direction for application security and vulnerability management programs, protecting Samsara's vast footprint end-to-end.
As a Staff Application Security Engineer, you will:
- Lead the strategy, operation, and continuous improvement of Samsara's vulnerability management program and other core application security programs.
- Own and drive down mean time to remediate (MTTR) across the vulnerability backlog.
- Build and champion automation and tooling to scale vulnerability detection and response.
- Set technical and architectural direction for the program.
- Drive remediation by building trust with engineering teams and providing clear guidance.
- Mentor and level up other engineers on secure design and remediation practices.
- Communicate risk and remediation tradeoffs to engineering leadership.
- Participate in security incident investigations and be on call to support critical vulnerability response.
Minimum requirements for the role:
- 10+ years of relevant experience as a cloud engineer or security engineer.
- Proficiency in Go, Python, and JavaScript.
- Demonstrated ability to independently set technical and architectural direction for a security program.
- Significant experience with modern vulnerability management tooling and deep familiarity with vulnerability scoring frameworks.
- Strong AWS cloud services background.
- Deep understanding of Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).
- Hands-on use of AI/LLM tooling in your own security workflow.
An ideal candidate also has:
- Experience with C/C++.
- Background at a cloud-native, AI-forward company.
- Experience with security automation platforms and serverless frameworks.
- Experience integrating vulnerability management into modern CI/CD pipelines.
- Experience spanning SaaS, firmware, and corporate IT security programs.
Total Rewards: Samsara offers a compensation program with base salary, performance-based bonus, and equity. The company provides flexible working models, professional development stipends, comprehensive health and parental leave plans, and more.
Flexible Working: Samsara embraces a flexible working model that caters to the diverse needs of its teams, supporting remote work and in-person collaboration.
Belonging at Samsara: The company welcomes everyone regardless of their background and is committed to ensuring equal opportunity in employment.