Staff App Security Engineer: Lead Vulnerability & Automation

Antler; Town of Texas (WI); On-site; USD 165,000 - 295,000; Full time

Job summary

Samsara is seeking an experienced security engineer to lead vulnerability management and related programs across cloud, firmware/IoT, and enterprise systems. You will drive remediation, build automation, and set technical direction in a fast-growing, AI-forward environment.

The role requires 10+ years in cloud/security engineering, proficiency in Go, Python, and JavaScript, and deep knowledge of SAST/DAST/SCA. Remote US-based with on-call responsibilities and strong cross-team collaboration.

Qualifications

• 10+ years of experience as a cloud or security engineer with broad vulnerability management.
• Proficiency in Go, Python, and JavaScript; strong AWS cloud services background.
• Experience with SAST/DAST/SCA and modern vulnerability tooling; AI in security workflows.
• Hands-on automation and architectural direction for security programs.

Responsibilities

• Lead strategy, operation, and continuous improvement of vulnerability management and related programs.
• Drive MTTR down across the backlog with tighter SLAs.
• Build automation and tooling to scale detection and response across cloud, firmware/IoT, and enterprise systems.
• Set technical direction and translate priorities into concrete execution plans.
• Drive remediation by partnering with engineering and program management.
• Mentor engineers in secure design and remediation practices.
• Communicate risk and remediation tradeoffs to engineering leadership.
• Participate in security incident investigations involving high-profile vulnerabilities.
• Be on-call to support critical vulnerability response.
• Embed Samsara principles and drive a growth mindset across teams globally.

Skills

Go

Python

JavaScript

Vulnerability management

AWS

SAST/DAST/SCA

AI tooling

Tools

Wiz

Semgrep

Tines

AWS Lambda

Job description

Samsara is seeking an experienced security engineer to lead vulnerability management and related programs across cloud, firmware/IoT, and enterprise systems. You will drive remediation, build automation, and set technical direction in a fast-growing, AI-forward environment.

The role requires 10+ years in cloud/security engineering, proficiency in Go, Python, and JavaScript, and deep knowledge of SAST/DAST/SCA. Remote US-based with on-call responsibilities and strong cross-team collaboration.