Staff AppSec Engineer — Remote UK, Cloud & IoT Security

Socket.dev; United Kingdom; Remote; GBP 139,000 - 174,000; Full time

Job summary

Samsara is seeking a Staff Application Security Engineer to lead the vulnerability management program across cloud, firmware/IoT, and corporate systems. You will drive automation, coordinate remediation, and set architectural direction while collaborating with engineering leadership.

The role is remote for candidates in the UK, with a strong emphasis on AI/LLM tooling in security workflows and ongoing on‑call support for critical vulnerabilities.

Qualifications

• 10+ years of experience as a cloud or security engineer with hands-on vulnerability management across multi-product environments.
• Proficiency in Go, Python, and JavaScript.
• Ability to independently set technical direction for security programs and drive remediation across multiple surfaces.
• Experience with vulnerability management tooling (e.g., Wiz, Semgrep) and CVSS/EPSS.
• Strong AWS cloud services background.
• Familiarity with SAST, DAST, and SCA.
• Hands-on use of AI/LLM tooling in security workflows.

Responsibilities

• Lead strategy, operation, and continuous improvement of vulnerability management programs.
• Reduce mean time to remediation across vulnerability backlogs and SLAs.
• Build automation and tooling to scale detection and response across cloud, firmware/IoT, and corporate systems.
• Define program direction and translate leadership priorities into execution plans.
• Mentor engineers on secure design and remediation practices and provide actionable guidance.

Skills

Go

Python

JavaScript

AWS

Wiz

Semgrep

AWS Lambda

AI/LLM tooling

Tools

Wiz

Semgrep

AWS

AWS Lambda

CI/CD tooling

Job description

Samsara is seeking a Staff Application Security Engineer to lead the vulnerability management program across cloud, firmware/IoT, and corporate systems. You will drive automation, coordinate remediation, and set architectural direction while collaborating with engineering leadership.

The role is remote for candidates in the UK, with a strong emphasis on AI/LLM tooling in security workflows and ongoing on‑call support for critical vulnerabilities.