Remote Lead Application Security Engineer – Cloud & IoT

Antler; United States; On-site; USD 165,000 - 295,000; Full time

Job summary

Samsara is seeking an Application Security leader to drive the vulnerability management program across cloud, firmware/IoT, and corporate systems. You will shape process, set architectural direction, and lower MTTR by improving automation and tooling.

The role requires mentoring engineers, collaborating with engineering teams, and communicating risk to leadership while supporting on-call incidents. Remote role open to US candidates, with a strong emphasis on building scalable security

Qualifications

• 10+ years of cloud/security engineering experience with vulnerability management across a multi-product environment.
• Proficiency in Go, Python and JavaScript.
• Ability to set technical and architectural direction for a security program and drive remediation.
• Experience with modern vulnerability management tooling and CVSS/EPSS familiarity.
• Strong AWS cloud services background and knowledge of SAST/DAST/SCA.

Responsibilities

• Lead the ongoing strategy, operation, and continuous improvement of the vulnerability management program.
• Own and drive down mean time to remedi ate across the backlog with tightened SLAs.
• Build automation and tooling to scale vulnerability detection and response across cloud, firmware/IoT, and corporate systems.
• Set technical direction and translate priorities into an execution plan for the team.
• Mentor engineers on secure design and remediation practices and communicate risk to leadership.

Skills

Go

Python

JavaScript

AWS

AI/LLM tooling

Tools

Wiz

Semgrep

SAST tooling

DAST tooling

SCA tooling

Job description

Samsara is seeking an Application Security leader to drive the vulnerability management program across cloud, firmware/IoT, and corporate systems. You will shape process, set architectural direction, and lower MTTR by improving automation and tooling.

The role requires mentoring engineers, collaborating with engineering teams, and communicating risk to leadership while supporting on-call incidents. Remote role open to US candidates, with a strong emphasis on building scalable security