[Hiring] Staff Offensive Security Engineer @Samsara

Role Description

Samsara sits at the center of hardware, software, AI, and the physical world, processing 25+ trillion data points annually across thousands of connected devices. The Samsara Application Security team protects this vast footprint end-to-end, spanning cloud services, internal systems, and firmware running on IoT hardware in the field.

As a Staff Application Security Engineer, you’ll drive the overarching technical direction for our application security and vulnerability management programs. This is a high-visibility role where you'll influence a broad surface area while retaining the flexibility to dive deep into critical domain focus areas as security priorities evolve.

This is a remote position, open to candidates residing in the US except the San Francisco Bay Metro Area, NYC Metro Area, and Washington, D.C. Metro Area., with working hours in the Central or Eastern time zone. Relocation assistance will not be provided for this role.

You should apply if:

• You want to impact the industries that run our world.
• You are the architect of your own career.
• You’re energized by our opportunity.
• You want to be with the best.

In this role, you will:

• Lead the ongoing strategy, operation, and continuous improvement of Samsara's vulnerability management program.
• Own and drive down mean time to remediate (MTTR) across the vulnerability backlog.
• Build and champion automation and tooling that scale vulnerability detection and response.
• Set technical and architectural direction for the program.
• Drive remediation by building trust with engineering teams and providing clear, actionable guidance.
• Mentor and level up other engineers on secure design and remediation practices.
• Communicate risk and remediation tradeoffs to engineering leadership.
• Participate in security incident investigations involving high-profile vulnerabilities.
• Be regularly on call to support critical vulnerability response.
• Champion, role model, and embed Samsara’s cultural principles.

Qualifications

• 10+ years of relevant experience as a cloud engineer or security engineer.
• Proficiency in Go, Python, and JavaScript.
• Demonstrated ability to independently set technical and architectural direction for a security program.
• Significant experience with modern vulnerability management tooling.
• Strong AWS cloud services background.
• Deep understanding of Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).
• Hands-on use of AI/LLM tooling in your own security workflow.
• Location: must be based in central or eastern timezones.

Requirements

• Experience with C/C++, relevant to firmware and embedded systems.
• Background at a cloud-native, AI-forward company.
• Experience with security automation platforms and serverless frameworks.
• Experience integrating vulnerability management into modern CI/CD pipelines.
• Experience managing vulnerabilities within a FedRAMP-certified environment.
• Experience building, extending, or wiring up AI copilots/agents for security workflows.

Benefits

• Annual Base Salary: £138,800 — £173,500 GBP.
• Above-market total compensation through a combination of base salary, performance-based bonus/variable pay, and equity.
• Flexible, employee-led remote model.
• Professional development stipend.
• Comprehensive health and parental leave plans.