Staff Application Security Engineer

🔥 15 hours ago

🇺🇸 United States – Remote

💵 $165.2k - $295k / year

⏰ Full Time

🔴 Lead

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Samsara

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2015

📦 Logistics

🏗️ Construction

🏥 Healthcare

💰 Seed Round on 2014-08

Logistics • Construction • Healthcare

Samsara is a technology company that provides a comprehensive operations platform aimed at improving the efficiency, safety, and sustainability of organizations. Their solutions include video-based safety, vehicle telematics, equipment monitoring, workforce applications, and site visibility. Samsara serves a wide range of industries, including transportation, logistics, construction, and government. The platform connects people, systems, and data, enabling organizations to make faster, data-informed decisions. Samsara's Connected Operations technology helps complex organizations operate more effectively by offering real-time GPS, proactive alerts, compliance training, and asset tracking.

📋 Description

• Drive the overarching technical direction for application security and vulnerability management programs • Lead the strategy, operation, and continuous improvement of the vulnerability management program • Own and reduce mean time to remediate across the vulnerability backlog • Build and champion automation and tooling for vulnerability detection and response across cloud, firmware/IoT, and corporate systems • Set technical and architectural direction and translate strategic priorities into an execution plan • Drive remediation by building trust with engineering teams and providing actionable guidance • Partner with technical program management on reporting • Mentor and level up engineers on secure design and remediation practices • Communicate risk and remediation tradeoffs to engineering leadership • Participate in security incident investigations involving high-profile vulnerabilities • Be regularly on call for critical vulnerability response • Champion and embed Samsara's cultural principles as the company scales globally

🎯 Requirements

• 10+ years of relevant experience as a cloud engineer or security engineer • Hands-on vulnerability management across a broad, multi-product enterprise environment • Proficiency in Go, Python, and JavaScript • Ability to independently set technical and architectural direction for a security program • Ability to drive remediation across a broad, multi-surface environment without direct authority over the teams doing the fixing • Significant experience with vulnerability management tooling such as Wiz and Semgrep • Deep familiarity with CVSS and EPSS vulnerability scoring frameworks • Strong AWS cloud services background • Deep understanding of SAST, DAST, and SCA • Hands-on use of AI/LLM tooling in security workflows • Credibility discussing AI's impact on the threat landscape and security tooling • Experience with C/C++ for firmware and embedded systems (ideal) • Background at a cloud-native, AI-forward company building agentic or AI-driven products (ideal) • Experience with security automation platforms such as Tines and serverless frameworks such as AWS Lambda (ideal) • Experience integrating vulnerability management into modern CI/CD pipelines (ideal) • Experience spanning SaaS, firmware, and corporate IT security programs (ideal) • Experience managing vulnerabilities within a FedRAMP-certified environment (ideal) • Experience building, extending, or wiring up AI copilots/agents for security workflows (ideal)

🏖️ Benefits

• Initial RSU grant with no vesting cliff • Ongoing equity refresh opportunities tied to performance • Performance-based bonus/variable pay • Equity for eligible roles • Flexible, employee-led remote model • Professional development stipend • Comprehensive health plans • Parental leave plans • Flexible working model • Remote work support • In-person office option • Equal opportunity employment • Reasonable accommodations throughout the recruiting process