Staff App Security Engineer: Lead Vulnerability & Automation

Samsara; Washington (District of Columbia); Hybrid; USD 165,000 - 295,000; Full time

Benefits offered by this job

Flexible working

Professional development stipend

Health & parental leave

Equity where eligible

Job summary

Samsara is hiring a Staff Application Security Engineer to lead vulnerability management across cloud, firmware/IoT, and corporate systems. You will shape the program's technical direction, drive remediation, and build scalable automation to detect and respond to threats.

You will mentor other engineers, communicate risk to leadership, and participate in incident investigations. This remote US role offers a flexible model and the ability to influence security at scale within a public company.

Qualifications

• 10+ years of relevant experience in cloud or security engineering.
• Ability to independently set technical direction for security programs.
• Experience with modern vulnerability management tooling and scoring frameworks.
• Strong understanding of SAST, DAST, and SCA; familiarity with AI/LLM in security workflows.

Responsibilities

• Lead strategy and operation of vulnerability management and related security programs.
• Drive down MTTR across the backlog with SLAs.
• Build automation to scale vulnerability detection and response.
• Set technical direction translating leadership priorities into execution plans.
• Collaborate with engineering and TPM on reporting and remediation guidance.
• Mentor engineers in secure design and remediation practices.
• Communicate risk and remediation tradeoffs to engineering leadership.
• Participate in security incident investigations for high-profile vulns.
• Be on call to support critical vulnerability response.

Skills

Ten+ years exp

Tech direction

Vulnerability tooling

AI/LLM in security

Security incident response

Mentor engineers

Tools

Wiz

Semgrep

AWS Lambda

CI/CD pipelines

Job description

Samsara is hiring a Staff Application Security Engineer to lead vulnerability management across cloud, firmware/IoT, and corporate systems. You will shape the program's technical direction, drive remediation, and build scalable automation to detect and respond to threats.

You will mentor other engineers, communicate risk to leadership, and participate in incident investigations. This remote US role offers a flexible model and the ability to influence security at scale within a public company.