> Markdown version of [/jobs/ext/4620771-staff-application-security-engineer-cloud-iot-security](https://www.wearedevelopers.com/jobs/ext/4620771-staff-application-security-engineer-cloud-iot-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Staff Application Security Engineer - Cloud & IoT Security

- **Company:** Briefed Inc.
- **Location:** San Francisco, CA, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** JavaScript (Programming Language), Artificial Intelligence, C++ (Programming Language), Software as a Service, Cloud Computing, Cloud Engineering, Cyber Security, Firmware, Python (Programming Language), Cloud Services, Software Vulnerability Management, Large Language Models, Software Security, Mttr, AWS Lambda, IoT Security, Serverless Computing, AI Co-pilot, Static Application Security Testing, Vulnerability Analysis, Golang, Dynamic Application Security Testing
- **Published:** November 7, 2026
- **Apply:** https://www.juju.com/job/28_25303_203c6f3473fbe7f738887705bd6463f6

## About the Role

* 10+ years of relevant experience as a cloud engineer or security engineer, including hands-on vulnerability management across a broad, multi-product enterprise environment.
 * Proficiency in Go, Python, and JavaScript.
 * Demonstrated ability to independently establish technical and architectural direction for security programs and drive remediation across multiple systems without direct authority over the teams responsible for fixes.
 * Significant experience with modern vulnerability management tools, such as Wiz and Semgrep.
 * Deep familiarity with vulnerability scoring frameworks, including the Common Vulnerability Scoring System (CVSS) and Exploit Prediction Scoring System (EPSS).
 * Strong knowledge of AWS cloud services.
 * Deep understanding of Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).
 * Hands-on experience using AI and large language model (LLM) tools in security workflows, including triage, detection logic, and remediation drafting.
 * Ability to discuss how AI is changing the threat landscape and the tools available to address emerging security challenges., * Experience with C/C++ relevant to firmware and embedded systems.
 * Background at a cloud-native, AI-focused company developing agentic or AI-driven products.
 * Experience with security automation platforms, such as Tines, and serverless frameworks, such as AWS Lambda.
 * Experience integrating vulnerability management into modern CI/CD pipelines using a shift-left security approach.
 * Experience spanning SaaS, firmware, and corporate IT security programs rather than a single product line.
 * Experience managing vulnerabilities in a FedRAMP-certified environment.
 * Experience building, extending, or integrating AI copilots and agents for security workflows, such as automated triage and remediation drafting.

## Description

The Application Security team protects this extensive ecosystem, including cloud services, internal systems, and firmware running on IoT hardware.

As a Staff Application Security Engineer, you'll establish the technical direction for Samsara's application security and vulnerability management programs. This high-impact role offers the opportunity to influence security across a broad technology landscape while addressing critical security priorities as they evolve., * Lead the strategy, operation, and continuous improvement of Samsara's vulnerability management program and other core application security initiatives.

 * Define effective security processes rather than simply executing existing procedures.
 * Reduce mean time to remediate (MTTR) across the vulnerability backlog as remediation service-level agreements (SLAs) become more stringent.
 * Build and promote automation and tooling that scale vulnerability detection and response across cloud, firmware/IoT, and corporate systems.
 * Establish technical and architectural direction for security programs, translating strategic priorities into actionable execution plans.
 * Drive vulnerability remediation by building trust with engineering teams and providing clear, practical guidance.
 * Partner with technical program management teams on reporting and remediation tracking.
 * Mentor engineers and strengthen secure design and remediation practices across teams.
 * Communicate security risks and remediation trade-offs to engineering leadership to support informed decisions.
 * Participate in security incident investigations involving high-profile vulnerabilities and assess their potential impact on Samsara's infrastructure.
 * Participate in regular on-call rotations to support critical vulnerability response.
 * Champion Samsara's cultural principles: Focus on Customer Success, Build for the Long Term, Adopt a Growth Mindset, Be Inclusive, and Win as a Team., Samsara supports flexible working arrangements that accommodate team needs and individual preferences. Employees can work remotely where operational requirements permit or use company offices for in-person collaboration.