Remote Staff AppSec Engineer — Lead Vulnerability Strategy

NextGenEnergyJobs; Northern (KY); Hybrid; USD 165,000 - 266,000; Full time

Job summary

Samsara is seeking a Staff Application Security Engineer to own the vulnerability management program across cloud, firmware/IoT, and corporate systems. You will influence technical direction, drive MTTR improvements, and build scalable automation while collaborating with engineering and product teams.

The role is remote within the United States (excluding SF Bay Area, NYC, and DC metro areas) and requires strong expertise in SAST/DAST/SCA, CVSS/EPSS, and AI-enabled security workflows.

Qualifications

• 10+ years in cloud/security engineering or vulnerability management across multi-product environments.
• Ability to set technical direction for a security program without direct authority.
• Experience with modern vulnerability tooling and CVSS/EPSS scoring.
• Hands-on with SAST/DAST/SCA and AI-assisted security workflows.

Responsibilities

• Lead the vulnerability management program and related security programs.
• Drive MTTR reduction across vulnerability backlog and SLA adherence.
• Build automation and tooling for scalable vulnerability detection and response.
• Set architectural direction and translate priorities into execution plans.
• Mentor engineers in secure design and remediation practices.
• Communicate risk and remediation tradeoffs to leadership.

Skills

Cloud security

Vulnerability management

SAST/DAST/SCA

AI/LLM security

CI/CD security

C/C++ experience

Tools

Wiz

Semgrep

Tines

AWS Lambda

Job description

Samsara is seeking a Staff Application Security Engineer to own the vulnerability management program across cloud, firmware/IoT, and corporate systems. You will influence technical direction, drive MTTR improvements, and build scalable automation while collaborating with engineering and product teams.

The role is remote within the United States (excluding SF Bay Area, NYC, and DC metro areas) and requires strong expertise in SAST/DAST/SCA, CVSS/EPSS, and AI-enabled security workflows.