Staff Application Security Engineer

Samsara

. Lead the strategy, operation, and continuous improvement of Samsara's vulnerability management and core application security programs .

Posted 9/15/2026full-timeRemote • Washington • United StatesLead💰 $165,200 - $295,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in vulnerability management and application security, with a strong focus on automation, cloud services, and secure design practices. Capable of leading technical direction and collaborating with engineering teams to drive remediation and improve security workflows.

Highest-signal resume keywords

Vulnerability ManagementCloud EngineeringProficiency In Go, Python, And JavaScriptAWS Cloud ServicesExperience With Modern Vulnerability Management Tooling

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementProficiency In GoProficiency In PythonProficiency In JavaScriptAWS Cloud ServicesSASTDASTSCAAI/LLM ToolingCI/CD Integration

Soft Skills

MentoringCommunicationCollaboration

Tools & Technologies

WizSemgrepTinesAWS Lambda

Certifications & Qualifications

FedRAMP Certification

Industry Keywords

Cloud-NativeAI-ForwardFirmwareEmbedded SystemsSecurity Automation

Tech Stack

Tools & technologies

AWSCloudIoTJavaScriptPythonC++Go

About the role

Key responsibilities & impact

Lead the strategy, operation, and continuous improvement of Samsara's vulnerability management and core application security programs
Drive down mean time to remediate across the vulnerability backlog
Build and champion automation and tooling for vulnerability detection and response across cloud, firmware/IoT, and corporate systems
Set technical and architectural direction and translate strategic priorities into execution plans
Drive remediation by partnering with engineering teams and providing actionable guidance
Partner with technical program management on reporting
Mentor and develop engineers on secure design and remediation practices
Communicate risk and remediation tradeoffs to engineering leadership
Participate in security incident investigations involving high-profile vulnerabilities
Be regularly on call for critical vulnerability response
Champion and embed Samsara's cultural principles as the company scales globally

Requirements

What you’ll need

10+ years of relevant experience as a cloud engineer or security engineer
Hands-on vulnerability management across a broad, multi-product enterprise environment
Proficiency in Go, Python, and JavaScript
Ability to independently set technical and architectural direction for a security program
Ability to drive remediation across a broad, multi-surface environment without direct authority over fixing teams
Significant experience with modern vulnerability management tooling, such as Wiz and Semgrep
Deep familiarity with CVSS and EPSS vulnerability scoring frameworks
Strong AWS cloud services background
Deep understanding of SAST, DAST, and SCA
Hands-on use of AI/LLM tooling in security workflows
Ability to discuss how AI is changing the threat landscape and security tooling
Experience with C/C++ relevant to firmware and embedded systems preferred
Background at a cloud-native, AI-forward company preferred
Experience with security automation platforms such as Tines and serverless frameworks such as AWS Lambda preferred
Experience integrating vulnerability management into modern CI/CD pipelines preferred
Experience spanning SaaS, firmware, and corporate IT security programs preferred
Experience managing vulnerabilities within a FedRAMP-certified environment preferred
Experience building or extending AI copilots/agents for security workflows preferred
Legal right to work at the company and in the specified work location

Benefits

Comp & perks

Initial RSU grant with no vesting cliff
Ongoing refresh opportunities tied to performance
Performance-based bonus/variable pay
Equity for eligible roles
Flexible, employee-led remote model
Professional development stipend
Comprehensive health plans
Parental leave plans
Remote work support
In-person office option
Reasonable accommodations throughout the recruiting process