Lead App Security Engineer - Cloud & IoT

Socket.dev; Dallas (TX); On-site; USD 165,000 - 295,000; Full time

Job summary

Samsara is seeking a Staff Application Security Engineer to lead vulnerability management and drive end-to-end security programs across cloud, firmware/IoT, and corporate systems.

You will own MTTR metrics, build scalable automation, and mentor teams in secure design. Remote role open to US-based candidates, with focus on building a secure, scalable platform for the next era of connected operations.

Qualifications

• 10+ years of relevant experience as a cloud or security engineer with hands-on vulnerability management across a multi-product enterprise.
• Proficiency in Go, Python, and JavaScript.
• Ability to independently set technical and architectural direction for a security program and drive remediation across a broad surface area.
• Experience with modern vulnerability management tooling (Wiz, Semgrep) and familiarity with CVSS/EPSS.
• Strong AWS cloud services background.
• Deep understanding of SAST, DAST, and SCA.
• Hands-on use of AI/LLM tooling in security workflows and ability to discuss AI-driven threat landscapes.

Responsibilities

• Lead strategy, operation, and improvement of Samsara's vulnerability management program and application security initiatives.
• Own MTTR reduction across the vulnerability backlog with tightening SLAs.
• Build automation and tooling to scale detection and response across cloud, firmware/IoT, and corporate systems.
• Set technical and architectural direction translating leadership priorities into execution plans.
• Mentor engineers on secure design and remediation practices; provide guidance to other teams.
• Communicate risk and remediation tradeoffs to engineering leadership.
• Participate in security incident investigations involving high-profile vulnerabilities.
• Be regularly on-call to support critical vulnerability response.
• Champion Samsara’s cultural principles as we scale globally.

Skills

Go

Python

JavaScript

Security program direction

Cloud security

On-call incident response

Tools

Wiz

Semgrep

AWS

Tines

Job description

Samsara is seeking a Staff Application Security Engineer to lead vulnerability management and drive end-to-end security programs across cloud, firmware/IoT, and corporate systems.

You will own MTTR metrics, build scalable automation, and mentor teams in secure design. Remote role open to US-based candidates, with focus on building a secure, scalable platform for the next era of connected operations.