Staff AppSec Engineer - Vulnerability Lead

NextGenEnergyJobs; United Kingdom; Remote; GBP 133,000 - 178,000; Full time

Job summary

Samsara is seeking a Staff Application Security Engineer to drive the vulnerability management program across cloud, firmware, and corporate IT. This remote role supports UK-based candidates and emphasizes automation and rapid remediation.

You will set technical direction, mentor engineers, and partner with product and engineering teams to reduce MTTR while aligning with Samsara's culture and security objectives.

Qualifications

• 10+ years of cloud or security engineering experience with vulnerability management.
• Ability to independently set technical direction for a security program.
• Experience with vulnerability management tooling (Wiz, Semgrep) and CVSS/EPSS.
• Understanding of SAST, DAST, and SCA.
• Hands-on use of AI/LLM tooling in security workflows.
• Location in central or eastern timezones.
• Experience with C/C++ for firmware/embedded systems.
• Background at an AI-forward cloud-native company.
• Experience with security automation platforms (Tines) and AWS Lambda.
• CI/CD integration with a shift-left mindset.
• Experience across SaaS, firmware, and corporate IT security.
• Experience in FedRAMP environments.

Responsibilities

• Lead the strategy, operation, and continuous improvement of the vulnerability management program across cloud, firmware, and IT systems.
• Own and drive down MTTR across the vulnerability backlog and enforce SLAs.
• Build automation and tooling to scale vulnerability detection and response across cloud, firmware/IoT, and corporate systems.
• Set technical and architectural direction translating leadership priorities into execution plans.
• Mentor engineers on secure design and remediation practices and provide actionable guidance.
• Communicate risk and remediation tradeoffs to engineering leadership in actionable terms.
• Participate in security incident investigations involving high-profile vulnerabilities.
• Be on-call to support critical vulnerability response.

Skills

Vulnerability management

Security program direction

SAST/DAST/SCA

AI/LLM in security

CI/CD shift-left

Cloud-native security

C/C++ for firmware

Security automation (Tines)

AWS Lambda/serverless

CVSS/EPSS familiarity

AI copilots/agents in security

Tools

Tines

AWS Lambda

Job description

Samsara is seeking a Staff Application Security Engineer to drive the vulnerability management program across cloud, firmware, and corporate IT. This remote role supports UK-based candidates and emphasizes automation and rapid remediation.

You will set technical direction, mentor engineers, and partner with product and engineering teams to reduce MTTR while aligning with Samsara's culture and security objectives.