Samsara
Staff Application Security Engineer
$165K–$295K
San Francisco, CA, United States +1 · Remote · Staff · Full-time · Posted Sep 4, 2026
- Location
- San Francisco, CA, United States
Remote - OR - Experience
- 10+ years of relevant experience; no alternatives stated.
- Visa sponsorship
- Must be able to secure and maintain the legal right to work at the company and in the specified work location.
About the job
Sets technical direction for application security and vulnerability management, scaling detection, remediation, and response across cloud services, IoT firmware, and corporate systems.
What you'll do
- Lead and continuously improve vulnerability management and related application security programs; reduce remediation time across the vulnerability backlog.
- Build automation and tooling for vulnerability detection and response, and guide engineering teams on remediation and secure design.
- Set program architecture and execution direction, mentor engineers, communicate security risks, investigate critical vulnerabilities, and participate in on-call response.
What they ask for
- 10+ years of relevant experience as a cloud engineer or security engineer, including hands-on vulnerability management across a broad, multi-product enterprise environment.
- Proficiency in Go, Python, and JavaScript; strong AWS cloud services background.
- Significant experience with vulnerability management tooling and familiarity with CVSS and EPSS; deep understanding of SAST, DAST, and SCA.
- Ability to set technical and architectural direction and drive remediation across teams; hands-on use of AI/LLM tooling in security workflows.
Nice to have
- Experience with C/C++, firmware or embedded systems, CI/CD security, serverless frameworks, or security automation platforms.
- Experience in FedRAMP environments or building AI copilots/agents for security workflows.
Pay
$165,200 — $295,000 USD (base salary)
Tools
Go, Python, JavaScript, AWS, Wiz, Semgrep, CVSS, EPSS
AI focus
Use AI/LLM tools for security workflow tasks such as triage, detection logic, and remediation drafting; understand AI’s effects on the threat landscape and security tooling. Building AI copilots or agents is a plus.
Model-written summary · the original posting is authoritative