Staff Application Security Engineer

About the Role

Samsara sits at the center of hardware, software, AI, and the physical world, processing 25+ trillion data points annually across thousands of connected devices. The Samsara Application Security team protects this footprint end-to-end, spanning cloud services, internal systems, and firmware running on IoT hardware in the field.

As a Staff Application Security Engineer, you’ll drive the overarching technical direction for our application security and vulnerability management programs. This is a high-visibility role where you'll influence a broad surface area while retaining the flexibility to dive deep into critical domain focus areas as security priorities evolve.

Responsibilities

• Lead the ongoing strategy, operation, and continuous improvement of Samsara's vulnerability management program, along with other core application security programs.
• Own and drive down mean time to remediate (MTTR) across the vulnerability backlog.
• Build and champion automation and tooling that scale vulnerability detection and response across cloud, firmware/IoT, and corporate systems.
• Set technical and architectural direction for the program, translating strategic priorities into execution plans.
• Drive remediation by building trust with engineering teams and providing clear, actionable guidance.
• Mentor and level up other engineers on secure design and remediation practices.
• Communicate risk and remediation tradeoffs to engineering leadership.
• Participate in security incident investigations involving high-profile vulnerabilities.
• Regularly participate in on-call rotations to support critical vulnerability response.
• Champion Samsara's cultural principles as the company scales.

Minimum Requirements

• 10+ years of relevant experience as a cloud engineer or security engineer, including hands-on vulnerability management across a multi-product enterprise environment.
• Proficiency in Go, Python, and JavaScript.
• Demonstrated ability to independently set technical and architectural direction for a security program and drive remediation without direct authority.
• Significant experience with modern vulnerability management tooling (e.g., Wiz, Semgrep) and familiarity with scoring frameworks such as CVSS and EPSS.
• Strong AWS cloud services background.
• Deep understanding of SAST, DAST, and SCA.
• Hands-on use of AI/LLM tooling in security workflows (triage, detection logic, remediation drafting) and credibility discussing AI-driven security threats and solutions.

Preferred Qualifications

• Experience with C/C++, relevant to firmware and embedded systems.
• Background at a cloud-native, AI-forward company building agentic or AI-driven products.
• Experience with security automation platforms (e.g., Tines) and serverless frameworks (e.g., AWS Lambda).
• Experience integrating vulnerability management into modern CI/CD pipelines with a shift-left approach.
• Experience spanning SaaS, firmware, and corporate IT security programs.
• Experience managing vulnerabilities within a FedRAMP-certified environment.
• Experience building or wiring up AI copilots/agents for security workflows.