Staff Application Security Engineer — Remote Vulnerability Leader

Socket.dev; New York (NY); On-site; USD 165,000 - 295,000; Full time

Job summary

Samsara in the United States is seeking a Staff Application Security Engineer to lead vulnerability management and drive the security program end-to-end. You will shape strategy, own MTTR metrics, and build scalable tooling across cloud, firmware/IoT, and corporate systems.

This high-visibility role requires hands-on expertise in SAST/DAST/SCA, AWS, and modern tooling like Wiz and Semgrep, plus AI-enabled security workflows.

Qualifications

• 10+ years of experience as a cloud or security engineer with vulnerability management across a multi-product environment.
• Proficiency in Go, Python, and JavaScript.
• Ability to set technical and architectural direction for a security program and drive remediation.
• Experience with Wiz, Semgrep, and vulnerability scoring frameworks like CVSS/EPSS.
• Strong AWS cloud services background.
• Deep understanding of SAST, DAST, and SCA.
• Hands-on use of AI/LLM tooling in security workflows.

Responsibilities

• Lead strategy, operation, and continuous improvement of the vulnerability management program and core application security programs.
• Own and reduce mean time to remediation across the backlog.
• Build automation and tooling for scalable detection and response across cloud, firmware/IoT, and corporate systems.
• Set technical and architectural direction and translate leadership priorities into execution plans.
• Mentor engineers on secure design and remediation; provide a trusted security voice to other teams.
• Communicate risk and remediation tradeoffs to engineering leadership.
• Participate in security incident investigations involving high-profile vulnerabilities.
• Be on call to support critical vulnerability response.
• Embed Samsara’s cultural principles as we scale globally.

Skills

Go

Python

JavaScript

C/C++

Vulnerability management

AWS

SAST

DAST

SCA

AI/LLM tooling

Security program direction

Tools

Wiz

Semgrep

AWS Lambda

Job description

Samsara in the United States is seeking a Staff Application Security Engineer to lead vulnerability management and drive the security program end-to-end. You will shape strategy, own MTTR metrics, and build scalable tooling across cloud, firmware/IoT, and corporate systems.

This high-visibility role requires hands-on expertise in SAST/DAST/SCA, AWS, and modern tooling like Wiz and Semgrep, plus AI-enabled security workflows.