Staff Offensive Security Engineer
Samsara · Remote - US
About this role
**Staff Offensive Security Engineer** **About Samsara** Samsara (NYSE: IOT) is the pioneer of the Connected Operations™ Cloud, enabling organizations to harness IoT data for actionable insights. We're digitally transforming industries representing 40% of global GDP—agriculture, construction, field services, transportation, and manufacturing. **About the Role** As a Staff Application Security Engineer, you'll drive technical direction for Samsara's application security and vulnerability management programs. You'll protect our vast footprint spanning cloud services, internal systems, and firmware on IoT hardware in the field, processing 25+ trillion data points annually. **Key Responsibilities** • Lead strategy and continuous improvement of vulnerability management programs • Own and drive down mean time to remediate (MTTR) across vulnerability backlogs • Build automation and tooling for vulnerability detection across cloud, firmware/IoT, and corporate systems • Set technical and architectural direction, translating strategic priorities into execution plans • Drive remediation by partnering with engineering teams and providing actionable guidance • Mentor engineers on secure design and remediation practices • Communicate risk and tradeoffs to engineering leadership • Participate in security incident investigations for high-profile vulnerabilities • Be on-call for critical vulnerability response **Minimum Requirements** • 10+ years as a cloud or security engineer with hands-on vulnerability management across multi-product enterprise environments • Proficiency in Go, Python, and JavaScript • Demonstrated ability to set technical direction and drive remediation without direct authority • Significant experience with modern vulnerability management tooling (Wiz, Semgrep) • Deep familiarity with CVSS and EPSS vulnerability scoring frameworks • Strong AWS cloud services background • Deep understanding of SAST, DAST, and SCA • Hands-on use of AI/LLM tooling in security workflows • Must be based in Central or Eastern time zones (US remote, excluding SF Bay Area, NYC Metro, and DC Metro) **Ideal Qualifications** • C/C++ experience for firmware and embedded systems • Background at cloud-native, AI-forward companies • Experience with security automation platforms and serverless frameworks • CI/CD pipeline integration with shift-left mentality • Multi-product security experience (SaaS, firmware, corporate IT) • FedRAMP environment experience • AI copilot/agent development for security workflows **Compensation & Benefits** **Salary:** $165,200 – $265,500 USD (base) • Performance-based bonus/variable pay • RSU grants with no vesting cliff • Flexible, employee-led remote model • Professional development stipend • Comprehensive health and parental leave plans **Location:** Remote (US, Central/Eastern time zones only)
Listing freshness
CronJobs last confirmed this listing 4d ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.