Staff Application Security Engineer — Remote

Socket.dev; Northern (KY); Hybrid; USD 165,000 - 266,000; Full time

Benefits offered by this job

Remote-friendly work model

Total rewards and benefits

Professional development stipend

Job summary

Samsara is seeking a Staff Application Security Engineer to direct our application security and vulnerability management programs, spanning cloud services, firmware, and corporate systems. This high-visibility role demands strategic thinking, deep technical chops, and the ability to influence across teams while evolving security priorities.

You will own remediation metrics, champion automation, mentor engineers, and translate risk into actionable guidance for leadership.

Qualifications

• 10+ years in cloud/security engineering with vulnerability management across multi-product environments.
• Proficient in Go, Python, and JavaScript; strong AWS background.
• Ability to set technical direction and drive remediation across teams without direct authority.
• Experience with SAST, DAST, and SCA; familiarity with CVSS/EPSS frameworks.

Responsibilities

• Lead strategy, operation, and continuous improvement of vulnerability management and related security programs.
• Drive MTTR reduction across backlog and enforce SLAs.
• Build automation and tooling to scale detection and response across cloud, firmware/IoT, and corporate systems.
• Set architectural direction and translate priorities into an executable plan.
• Mentor engineers on secure design and remediation practices and communicate risks to leadership.

Skills

Go

Python

JavaScript

AWS

Vulnerability management

SAST/DAST/SCA

Tools

Wiz

Semgrep

CI/CD tooling

Job description

Samsara is seeking a Staff Application Security Engineer to direct our application security and vulnerability management programs, spanning cloud services, firmware, and corporate systems. This high-visibility role demands strategic thinking, deep technical chops, and the ability to influence across teams while evolving security priorities.

You will own remediation metrics, champion automation, mentor engineers, and translate risk into actionable guidance for leadership.