Remote Security Engineer: AppSec, SIEM & AI Automation

SambaSafety; United States; On-site; USD 130,000 - 150,000; Full time

Job summary

SambaSafety is seeking an experienced Security Engineer to join our security team in a multifaceted role spanning vulnerability management, application security, MITRE ATT&CK-based threat detection, and AI-driven automation. You will work with development, infrastructure, and vendors to optimize security posture and manage enterprise risk.

The role requires expertise across cloud security, IAM, EDR, SIEM, and scripting for automation, with collaboration across multiple teams to strengthen our

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or related field, or equivalent professional experience.
• 5–7 years of experience in security engineering with demonstrated expertise across multiple domains, including application security.
• Strong knowledge of MITRE ATT&CK, vulnerability management, and secure coding practices.

Responsibilities

• Lead application security remediation across development teams.
• Administer SAST, DAST, and SCA tooling and integrate with CI/CD.
• Manage vulnerability assessment platforms and risk prioritization.
• Develop AI-enabled security automation and SIEM/detection rules.
• Lead Tier 2/3 incident response and cloud security configurations.
• Collaborate with cross-functional teams to improve security posture.

Skills

MITRE ATT&CK mapping

Vulnerability management

SAST

DAST

SCA tools

SIEM administration

EDR

Cloud security

Python scripting

Education

Bachelor's degree or equivalent

Tools

SAST tooling

DAST tooling

SCA tooling

EDR

Job description

SambaSafety is seeking an experienced Security Engineer to join our security team in a multifaceted role spanning vulnerability management, application security, MITRE ATT&CK-based threat detection, and AI-driven automation. You will work with development, infrastructure, and vendors to optimize security posture and manage enterprise risk.

The role requires expertise across cloud security, IAM, EDR, SIEM, and scripting for automation, with collaboration across multiple teams to strengthen our