Staff Application Security Engineer - Cloud & IoT Security

The Application Security team protects this extensive ecosystem, including cloud services, internal systems, and firmware running on IoT hardware.

As a Staff Application Security Engineer, you’ll establish the technical direction for Samsara’s application security and vulnerability management programs. This high-impact role offers the opportunity to influence security across a broad technology landscape while addressing critical security priorities as they evolve., * Lead the strategy, operation, and continuous improvement of Samsara’s vulnerability management program and other core application security initiatives.

• Define effective security processes rather than simply executing existing procedures.
• Reduce mean time to remediate (MTTR) across the vulnerability backlog as remediation service-level agreements (SLAs) become more stringent.
• Build and promote automation and tooling that scale vulnerability detection and response across cloud, firmware/IoT, and corporate systems.
• Establish technical and architectural direction for security programs, translating strategic priorities into actionable execution plans.
• Drive vulnerability remediation by building trust with engineering teams and providing clear, practical guidance.
• Partner with technical program management teams on reporting and remediation tracking.
• Mentor engineers and strengthen secure design and remediation practices across teams.
• Communicate security risks and remediation trade-offs to engineering leadership to support informed decisions.
• Participate in security incident investigations involving high-profile vulnerabilities and assess their potential impact on Samsara’s infrastructure.
• Participate in regular on-call rotations to support critical vulnerability response.
• Champion Samsara’s cultural principles: Focus on Customer Success, Build for the Long Term, Adopt a Growth Mindset, Be Inclusive, and Win as a Team., Samsara supports flexible working arrangements that accommodate team needs and individual preferences. Employees can work remotely where operational requirements permit or use company offices for in-person collaboration.

• 10+ years of relevant experience as a cloud engineer or security engineer, including hands-on vulnerability management across a broad, multi-product enterprise environment.
• Proficiency in Go, Python, and JavaScript.
• Demonstrated ability to independently establish technical and architectural direction for security programs and drive remediation across multiple systems without direct authority over the teams responsible for fixes.
• Significant experience with modern vulnerability management tools, such as Wiz and Semgrep.
• Deep familiarity with vulnerability scoring frameworks, including the Common Vulnerability Scoring System (CVSS) and Exploit Prediction Scoring System (EPSS).
• Strong knowledge of AWS cloud services.
• Deep understanding of Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).
• Hands-on experience using AI and large language model (LLM) tools in security workflows, including triage, detection logic, and remediation drafting.
• Ability to discuss how AI is changing the threat landscape and the tools available to address emerging security challenges., * Experience with C/C++ relevant to firmware and embedded systems.
• Background at a cloud-native, AI-focused company developing agentic or AI-driven products.
• Experience with security automation platforms, such as Tines, and serverless frameworks, such as AWS Lambda.
• Experience integrating vulnerability management into modern CI/CD pipelines using a shift-left security approach.
• Experience spanning SaaS, firmware, and corporate IT security programs rather than a single product line.
• Experience managing vulnerabilities in a FedRAMP-certified environment.
• Experience building, extending, or integrating AI copilots and agents for security workflows, such as automated triage and remediation drafting.

The annual base salary range for this full-time position is $165,200-$295,000 USD.

The applicable compensation range depends on the employee’s primary work location, which may result in a narrower range than the full range listed. Actual offers may vary based on location, job-related knowledge, skills, and experience.

The role is also eligible for an initial restricted stock unit (RSU) grant with no vesting cliff, along with ongoing performance-based refresh opportunities, subject to applicable plan terms and conditions.

Total Rewards and Benefits

Samsara offers a competitive total rewards package designed to support employees and recognize their contributions.

Benefits and compensation may include:

• Competitive base salary and performance-based bonus or variable compensation.
• Equity opportunities for eligible employees.
• Flexible, employee-led remote work arrangements.
• Professional development stipends.
• Comprehensive health benefits.
• Parental leave and additional employee support programs.

Samsara differentiates compensation based on performance, with high-performing employees having opportunities to earn above-market total compensation over time.

Samsara operates at the intersection of hardware, software, artificial intelligence, and the physical world, processing more than 25 trillion data points annually across thousands of connected devices., Why Join Samsara?

• Make a real-world impact: Help improve safety, reduce emissions, keep essential services running, and protect workers across industries.
• Shape your career: Grow professionally in an environment that encourages career development, experimentation, and mastery of your craft.
• Contribute to an ambitious mission: Help digitize major sectors of the global economy through innovative technology.
• Work with talented colleagues: Join a high-performing team that values collaboration, mutual support, and shared success.