Samsara
Staff Application Security Engineer
$165K–$295K
Remote - DC +1 · Remote · Staff · Full-time · Posted Sep 15, 2026
- Location
- Remote - DC
Remote - OR - Experience
- 10+ years of relevant experience as a cloud engineer or security engineer.
- Visa sponsorship
- The role is open to candidates residing in the US. Applicants must be able to secure and maintain the legal right to work at the company and in the specified work location.
About the job
Sets technical direction for Samsara’s application security and vulnerability management programs across cloud, firmware/IoT, and corporate systems, and drives vulnerability remediation and response.
What you'll do
- Define and improve vulnerability management and other application security programs, including automation, tooling, and remediation targets.
- Set program architecture and execution direction; partner with engineering teams to drive fixes and communicate risk tradeoffs.
- Mentor engineers and participate in high-profile vulnerability investigations and on-call response.
What they ask for
- 10+ years of relevant cloud or security engineering experience, including hands-on vulnerability management across a broad, multi-product enterprise environment.
- Proficiency in Go, Python, and JavaScript; strong AWS cloud services background.
- Experience setting security-program technical direction and driving remediation across multiple surfaces without direct authority.
- Experience with vulnerability management tooling and CVSS/EPSS, SAST, DAST, and SCA; hands-on AI/LLM use in security workflows.
Nice to have
- C/C++ experience relevant to firmware and embedded systems; security automation platforms such as Tines, AWS Lambda, CI/CD, or FedRAMP experience.
- Experience at an AI-forward company or building AI copilots/agents for security workflows.
Pay
$165,200 — $295,000 USD (annual base salary)
Tools
Go, Python, JavaScript, AWS, Wiz, Semgrep, CVSS, EPSS
AI focus
Use AI/LLM tooling in security workflows such as triage, detection logic, and remediation drafting; speak to AI’s effect on the threat landscape and security tooling. Building security copilots or agents is preferred.
Model-written summary · the original posting is authoritative