Security Engineer - AI-Driven Defenses & Cloud Security

SambaSafety; United States; On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible PTO

401k match

Healthcare benefits

Paid parental leave

Job summary

SambaSafety is seeking an experienced Security Engineer to join the security team. The role spans vulnerability management, application security, MITRE ATT&CK-based threat detection, and AI-driven security automation.

You’ll work with development, infrastructure, vendors, and stakeholders to optimize security posture and reduce enterprise risk. Key responsibilities include leading AppSec remediation, administering SAST/DAST/SCA tooling, and building automation with CI/CD pipelines.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or related field or equivalent.
• 5-7 years of security engineering experience across multiple domains, including application security.

Responsibilities

• Lead AppSec vulnerability remediation across development teams.
• Administer SAST/DAST/SCA tooling and integration with CI/CD pipelines.
• Develop ATT&CK-based detection rules and alert triage workflows.
• Build automation pipelines and AI-driven security tooling.
• Provide security engineering input for architecture decisions and security reviews.

Skills

Vulnerability management

Application security

MITRE ATT&CK

Scripting

Cloud security

IAM

EDR

SIEM

Automation

AI agent engineering

Education

Bachelor's degree in CS / Info Security

Tools

SAST

DAST

SCA

CI/CD tooling

OWASP Top 10 knowledge

Job description

SambaSafety is seeking an experienced Security Engineer to join the security team. The role spans vulnerability management, application security, MITRE ATT&CK-based threat detection, and AI-driven security automation.

You’ll work with development, infrastructure, vendors, and stakeholders to optimize security posture and reduce enterprise risk. Key responsibilities include leading AppSec remediation, administering SAST/DAST/SCA tooling, and building automation with CI/CD pipelines.