Security Engineer

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SambaSafety

WebsiteLinkedInAll Job Openings

201 - 500 employees

🛡️ Insurance

📦 Logistics

🏥 Healthcare

💰 $16.4M Venture Round on 2014-10

Insurance • Logistics • Healthcare

SambaSafety is a provider of cloud-based driver risk management solutions that help fleets, insurers and platform businesses identify, monitor and reduce driver risk. The company aggregates telematics, motor vehicle records, public records and other driving data into actionable insights, and offers continuous monitoring, online driver training, license verification and analytics through a SaaS platform. Its products focus on improving safety, compliance and underwriting efficiency for commercial fleets, sharing-economy platforms, insurers and employers.

📋 Description

• Lead application security vulnerability remediation across development teams • Administer SAST, DAST, SCA, and dependency-scanning tools • Triage, validate, prioritize, and coordinate remediation of vulnerability findings • Provide OWASP Top 10 and secure-coding remediation guidance • Integrate security scanning tools with ticketing systems and CI/CD pipelines • Generate AppSec metrics, management reports, and dashboards • Administer vulnerability management platforms and manage exceptions, risk acceptances, aging, and SLA compliance • Develop MITRE ATT&CK-mapped detection rules, alert-triage workflows, hunting queries, and incident reports • Build and maintain scripted, cloud-based automation pipelines for AI-driven security operations • Develop and tune AI-agent prompts, verdict logic, disposition rules, integrations, enrichment, and reporting workflows • Administer and tune EDR, SIEM, and IAM platforms • Lead Tier 2/3 security incident investigation and response • Support penetration testing, red-team activities, WAF/CDN audits, and security architecture decisions • Draft and review security policies and procedures and conduct framework gap analysis • Analyze and integrate threat intelligence and implement IOC blocking and detection rules • Participate in security design reviews, product vulnerability meetings, ISACs, customer security calls, and project security reviews • Act as an escalation point for Security Analysts • Support the sales team with security questionnaires

🎯 Requirements

• Bachelor's degree in Computer Science, Information Security, Engineering, or related technical field, or equivalent professional experience • 5–7 years of experience in security engineering with expertise across multiple security domains, including application security • Expert knowledge of vulnerability management platforms • Proficiency in MITRE ATT&CK mapping for detection rules and incident response • Strong experience with SAST, DAST, and SCA tooling • Deep understanding of OWASP Top 10, injection flaws, XSS, and authentication bypasses • Hands-on experience building cloud-based automation with serverless functions, event-driven pipelines, and secrets management • Experience with or strong interest in AI agent engineering and tool-integration protocols for security operations • Proficiency administering EDR platforms and experience with SIEM administration • Understanding of IAM platforms and federation/SSO concepts • Proficiency in cloud security using AWS, Azure, or GCP • Understanding of WAF configuration and audit • Proficiency in scripting and automation; Python required, PowerShell a plus • Understanding of DevSecOps and secure CI/CD practices • Practical experience with AI-powered security tooling, including LLM-based agents, and awareness of prompt injection and tool/agent security risks • Ability to produce dashboards and reporting for technical and executive audiences • Experience with SIEM, security automation/orchestration, vulnerability management, EDR, DLP, GRC, SAST, DAST, SCA, cloud security, threat intelligence, ticketing, and collaboration platforms • Strong analytical thinking and problem-solving capabilities • Excellent communication skills for technical and business audiences • Strong Agile proficiency and ability to integrate security into sprint planning • Experience collaborating with development teams on secure coding • Ability to translate technical vulnerability findings into actionable remediation guidance • Strong written communication skills for security documentation, audit responses, and questionnaires • Ability to act as an escalation point for Security Analysts and participate in customer security calls • Preferred certifications and experience include CySA+, cloud security certification, GIAC GSEC, CEH, GIAC GWEB, CompTIA PenTest+, GIAC GCTI, SIEM certification, DevSecOps, SSDLC, SOC 2, ISO 27001, security audits, vendor risk assessment, threat intelligence, penetration testing coordination, security awareness training, LLM-based agents, and container/Kubernetes security

🏖️ Benefits

• Flexible and generous Paid Time Off • Paid Volunteer Days • 401k Employer Match • Generous Healthcare Benefits • Up to 12 weeks paid time off for maternity leave based on tenure • Wellness & Tuition Reimbursement • Flexible Work Arrangements • SambaSafety swag • SambaSafety Events