← All roles

Staff Application Security Engineer

Samsara· IT Security
Apply on company site
Remote$165.2k - $295kFull-timePosted 1mo ago

About the role

Senior security engineering role focused on leading Samsara's application security and vulnerability management program, with ownership of strategy, automation, and remediation across cloud, firmware/IoT, and corporate systems.

Responsibilities

  • Lead the ongoing strategy, operation, and continuous improvement of Samsara's vulnerability management program, along with other core application security programs.
  • Own and drive down mean time to remediation (MTTR) across the vulnerability backlog, as SLAs tighten.
  • Build and champion automation and tooling that scale vulnerability detection and response across cloud, firmware/IoT, and corporate systems.
  • Set technical and architectural direction for the program, translating leadership's strategic priorities into a concrete execution plan for the team.
  • Drive remediation by building trust with engineering teams and providing clear, actionable guidance — partnering with technical program management on reporting rather than owning it directly.
  • Mentor and level up other engineers on secure design and remediation practices, and be a technical voice other teams look to when priorities are unclear.
  • Communicate risk and remediation tradeoffs to engineering leadership in terms they can act on, without owning the relationship end to end.
  • Participate in security incident investigations involving high-profile vulnerabilities, assessing potential impact on Samsara's infrastructure.
  • Be regularly on call to support critical vulnerability response.
  • Champion, role model, and embed Samsara’s cultural principles as we scale globally.

Qualifications

  • 10+ years of relevant experience as a cloud engineer or security engineer, including hands-on vulnerability management across a broad, multi-product enterprise environment — not a single product or team's slice of it.
  • Proficiency in Go, Python, and JavaScript.
  • Demonstrated ability to independently set technical and architectural direction for a security program, and to drive remediation across a broad, multi-surface environment without direct authority over the teams doing the fixing.
  • Significant experience with modern vulnerability management tooling (e.g., Wiz, Semgrep) and deep familiarity with vulnerability scoring frameworks such as CVSS and EPSS.
  • Strong AWS cloud services background.
  • Deep understanding of Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).
  • Hands-on use of AI/LLM tooling in your own security workflow — triage, detection logic, remediation drafting — plus credibility speaking to how AI is changing the threat landscape and the tooling available to address it.

Skills

Required:Vulnerability managementGoPythonJavaScriptAWSSAST/DAST/SCAVulnerability scoring (CVSS, EPSS)AI/LLM tooling in security

Benefits

  • Total Rewards: base salary, performance-based bonus/variable pay, and equity (for eligible roles)
  • Flexible, employee-led remote model
  • Professional development stipend
  • Comprehensive health and parental leave plans
Last updated Oct 10, 2026. Interested? Apply on the company site.

About Samsara

Samsara | The Connected Operations Platform

Samsara's connected operations platform helps 20,000+ operations improve safety, cut costs, and run smarter — built with operators.

Fleet TelematicsCameras and VideoDriver ExperienceSafety Reporting & InsightsEquipment ManagementIntegrated platformAI-powered analyticsFleet Intelligence
Company profileWebsite

More open roles at Samsara