About the company
Samsara is the pioneer of the Connected Operations™ Cloud, a platform that helps organizations relying on physical operations use Internet of Things data to develop actionable insights and improve operations. Its application security team protects cloud services, internal systems, and firmware running on IoT hardware.
Responsibilities
- Lead the strategy, operation, and continuous improvement of the vulnerability management and other core application security programs; define the processes.
- Drive down mean time to remediate (MTTR) across the vulnerability backlog as SLAs tighten.
- Build automation and tooling to scale vulnerability detection and response across cloud, firmware/IoT, and corporate systems.
- Set technical and architectural direction and translate leadership priorities into an execution plan.
- Drive remediation through partnerships with engineering teams, providing clear, actionable guidance; partner with technical program management on reporting.
- Mentor engineers on secure design and remediation practices.
- Communicate risk and remediation tradeoffs to engineering leadership.
- Participate in security incident investigations involving high-profile vulnerabilities and assess potential impact on Samsara’s infrastructure.
- Be regularly on call to support critical vulnerability response.
Requirements
- 10+ years of relevant experience as a cloud engineer or security engineer, including hands-on vulnerability management across a broad, multi-product enterprise environment.
- Proficiency in Go, Python, and JavaScript.
- Ability to independently set technical and architectural direction for a security program and drive remediation across a broad, multi-surface environment without direct authority over the teams doing the fixing.
- Significant experience with modern vulnerability management tooling such as Wiz and Semgrep, and deep familiarity with vulnerability scoring frameworks such as CVSS and EPSS.
- Strong AWS cloud services background.
- Deep understanding of Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).
- Hands-on use of AI/LLM tooling in security workflows such as triage, detection logic, and remediation drafting; ability to discuss how AI is changing the threat landscape and available tooling.
- Additional desired experience: C/C++ for firmware and embedded systems; work at a cloud-native, AI-forward company building agentic or AI-driven products; security automation platforms such as Tines; serverless frameworks such as AWS Lambda; integrating vulnerability management into modern CI/CD pipelines with a shift-left mentality; SaaS, firmware, and corporate IT security programs; vulnerabilities in a FedRAMP-certified environment; and building, extending, or wiring up AI copilots/agents for security workflows.
Conditions
- Remote position open to candidates residing in the US; the primary work location determines the applicable pay range, which may be narrower than the full range shown.
- Annual base salary: $165,200–$295,000 USD. Pay may vary based on city of residence, job-related knowledge, skills, and experience.
- Eligible for an initial RSU grant with no vesting cliff and ongoing performance-based refresh opportunities, subject to plan terms and conditions. Total compensation includes base salary, performance-based bonus/variable pay, and equity for eligible roles.
- Flexible, employee-led remote model; offices are open for employees who prefer in-person work, and remote work is supported where operational requirements allow. Some positions may require proximity to an office or a specified geographic area.
- Professional development stipend, comprehensive health and parental leave plans, and other benefits.