Staff Application Security Engineer - Remote

Socket.dev; Washington (District of Columbia); Remote; USD 165,000 - 295,000; Full time

Benefits offered by this job

Flexible remote model

Health benefits

Professional development stipend

Parental leave

Job summary

Samsara is seeking a Staff Application Security Engineer to shape the vulnerability management program across cloud, firmware/IoT, and corporate IT. You will drive strategic direction, optimize remediation metrics, and build scalable tooling to protect millions of devices.

You will mentor engineers, communicate risk to leadership, and participate in high-profile incident investigations, all while supporting a flexible remote work model in the US.

Qualifications

• 10+ years of relevant experience as a cloud engineer or security engineer, including hands-on vulnerability management across a broad, multi-product enterprise environment.
• Proficiency in Go, Python, and JavaScript.
• Ability to independently set technical and architectural direction for a security program and drive remediation across a broad surface.
• Experience with modern vulnerability management tooling and vulnerability scoring frameworks like CVSS/EPSS.
• Strong AWS cloud services background and knowledge of SAST/DAST/SCA.
• Hands-on use of AI/LLM tooling in security workflows and familiarity with AI-driven tooling.
• Experience with security automation platforms and CI/CD integration is a plus.

Responsibilities

• Lead the ongoing strategy, operation, and continuous improvement of Samsara's vulnerability management program and related security programs.
• Own MTTR across the backlog and ensure SLAs are met.
• Build automation and tooling to scale detection and response across cloud, firmware/IoT, and corporate systems.
• Set technical and architectural direction translating leadership priorities into execution plans.
• Drive remediation by partnering with engineering and providing actionable guidance.
• Mentor engineers on secure design and remediation practices.

Skills

Go

Python

JavaScript

Vulnerability management

AWS

SAST/DAST/SCA

Technical direction

AI/LLM tooling

C/C++

Tools

Wiz

Semgrep

AWS Lambda

Job description

Samsara is seeking a Staff Application Security Engineer to shape the vulnerability management program across cloud, firmware/IoT, and corporate IT. You will drive strategic direction, optimize remediation metrics, and build scalable tooling to protect millions of devices.

You will mentor engineers, communicate risk to leadership, and participate in high-profile incident investigations, all while supporting a flexible remote work model in the US.