Staff Application Security Engineer

Samsara

. Drive the overarching technical direction for application security and vulnerability management programs .

Posted 9/15/2026full-timeRemote • United StatesLead💰 $165,200 - $295,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in vulnerability management and application security, with a strong focus on automation and tooling across cloud and corporate systems. Proven ability to lead technical direction, mentor engineering teams, and communicate effectively with leadership on risk and remediation strategies.

Highest-signal resume keywords

Vulnerability ManagementGo ProgrammingAWS Cloud ServicesSAST, DAST, and SCAAI/LLM Tooling

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementGo ProgrammingPython ProgrammingJavaScript ProgrammingAWS Cloud ServicesSASTDASTSCACVSSEPSS

Soft Skills

MentoringCommunicationTrust Building

Tools & Technologies

WizSemgrepTinesAWS LambdaCI/CD Pipelines

Certifications & Qualifications

FedRAMP Certification

Industry Keywords

Cloud EngineeringSecurity EngineeringVulnerability DetectionFirmware SecurityCorporate IT Security

Tech Stack

Tools & technologies

AWSCloudIoTJavaScriptPythonC++Go

About the role

Key responsibilities & impact

Drive the overarching technical direction for application security and vulnerability management programs
Lead the strategy, operation, and continuous improvement of the vulnerability management program
Own and reduce mean time to remediate across the vulnerability backlog
Build and champion automation and tooling for vulnerability detection and response across cloud, firmware/IoT, and corporate systems
Set technical and architectural direction and translate strategic priorities into an execution plan
Drive remediation by building trust with engineering teams and providing actionable guidance
Partner with technical program management on reporting
Mentor and level up engineers on secure design and remediation practices
Communicate risk and remediation tradeoffs to engineering leadership
Participate in security incident investigations involving high-profile vulnerabilities
Be regularly on call for critical vulnerability response
Champion and embed Samsara's cultural principles as the company scales globally

Requirements

What you’ll need

10+ years of relevant experience as a cloud engineer or security engineer
Hands-on vulnerability management across a broad, multi-product enterprise environment
Proficiency in Go, Python, and JavaScript
Ability to independently set technical and architectural direction for a security program
Ability to drive remediation across a broad, multi-surface environment without direct authority over the teams doing the fixing
Significant experience with vulnerability management tooling such as Wiz and Semgrep
Deep familiarity with CVSS and EPSS vulnerability scoring frameworks
Strong AWS cloud services background
Deep understanding of SAST, DAST, and SCA
Hands-on use of AI/LLM tooling in security workflows
Credibility discussing AI's impact on the threat landscape and security tooling
Experience with C/C++ for firmware and embedded systems (ideal)
Background at a cloud-native, AI-forward company building agentic or AI-driven products (ideal)
Experience with security automation platforms such as Tines and serverless frameworks such as AWS Lambda (ideal)
Experience integrating vulnerability management into modern CI/CD pipelines (ideal)
Experience spanning SaaS, firmware, and corporate IT security programs (ideal)
Experience managing vulnerabilities within a FedRAMP-certified environment (ideal)
Experience building, extending, or wiring up AI copilots/agents for security workflows (ideal)

Benefits

Comp & perks

Initial RSU grant with no vesting cliff
Ongoing equity refresh opportunities tied to performance
Performance-based bonus/variable pay
Equity for eligible roles
Flexible, employee-led remote model
Professional development stipend
Comprehensive health plans
Parental leave plans
Flexible working model
Remote work support
In-person office option
Equal opportunity employment
Reasonable accommodations throughout the recruiting process