Staff Application Security Engineer: Vulnerability Leader

Samsara; United States; Remote; USD 165,000 - 266,000; Full time

Job summary

Samsara, a remote-friendly U.S. company, is seeking a Staff Application Security Engineer to lead the vulnerability management program across cloud services, firmware/IoT, and corporate systems.

You will set technical direction, reduce MTTR, build scalable automation, mentor engineers, and partner with engineering on risk-based remediation. This role requires 10+ years of deep security and cloud experience and operates in Central or Eastern time zones.

Qualifications

• 10+ years of experience in cloud/security engineering, with hands-on vulnerability management across multi-product environments.
• Proficiency in Go, Python, and JavaScript.
• Ability to independently set technical direction for security programs and drive remediation.
• Experience with modern vulnerability tooling (e.g., Wiz, Semgrep) and CVSS/EPSS scoring.
• Strong AWS cloud services background and knowledge of SAST/DAST/SCA.
• Hands-on use of AI/LLM tooling in security workflows and threat models.

Responsibilities

• Lead strategy, operation, and continuous improvement of Samsara’s vulnerability management program.
• Reduce mean time to remediation (MTTR) across the backlog and SLAs.
• Build automation and tooling to scale detection and response across cloud, firmware/IoT, and corporate systems.
• Set architectural direction for the program and translate priorities into execution plans.
• Mentor engineers on secure design and remediation practices and provide actionable guidance.
• Communicate risk and remediation tradeoffs to engineering leadership in actionable terms.
• Participate in security incident investigations involving high-profile vulnerabilities.
• Be on call to support critical vulnerability response.
• Champion Samsara’s cultural principles as we scale globally.

Skills

Go

Python

JavaScript

AWS

Vulnerability mgmt

Tools

Semgrep

CI/CD tooling

Job description

Samsara, a remote-friendly U.S. company, is seeking a Staff Application Security Engineer to lead the vulnerability management program across cloud services, firmware/IoT, and corporate systems.

You will set technical direction, reduce MTTR, build scalable automation, mentor engineers, and partner with engineering on risk-based remediation. This role requires 10+ years of deep security and cloud experience and operates in Central or Eastern time zones.