Remote Staff AppSec Engineer: Lead Vulnerability Strategy

Socket.dev; Seattle (WA); On-site; USD 165,000 - 295,000; Full time

Job summary

Samsara is seeking a Staff Application Security Engineer to lead vulnerability management and drive security program strategy across cloud, firmware/IoT, and corporate systems. You’ll shape technical direction, automate defenses, and mentor engineers while partnering with product teams.

Remote role for candidates in the US. The position emphasizes COTS/AI tooling, strategic risk decisions, and strong collaboration with engineering and incident response teams to protect critical infrastructure.

Qualifications

• 10+ years of cloud or security engineering with vulnerability management across multiple products.
• Proficiency in Go, Python, and JavaScript.
• Ability to set technical direction and drive remediation across large teams.
• Experience with modern tooling (Wiz, Semgrep) and CVSS/EPSS scoring.
• Strong AWS cloud services background with SAST/DAST/SCA knowledge.
• Hands-on use of AI/LLM tools in security workflows.

Responsibilities

• Lead strategy, operation, and continuous improvement of vulnerability management and related security programs.
• Reduce MTTR across the vulnerability backlog and improve SLAs.
• Build automation and tooling to scale detection and response across cloud, firmware, and IT.
• Set architectural direction translating leadership priorities into execution plans.
• Partner with engineering for remediation, mentoring on secure design and practices.
• Communicate risk and remediation tradeoffs to leadership for action.
• Participate in high‑impact security incident investigations and on‑call duties.

Skills

Go

Python

JavaScript

Tools

Wiz

Semgrep

Job description

Samsara is seeking a Staff Application Security Engineer to lead vulnerability management and drive security program strategy across cloud, firmware/IoT, and corporate systems. You’ll shape technical direction, automate defenses, and mentor engineers while partnering with product teams.

Remote role for candidates in the US. The position emphasizes COTS/AI tooling, strategic risk decisions, and strong collaboration with engineering and incident response teams to protect critical infrastructure.