2 hours ago
Responsibilities
- Lead the strategy, operation, and continuous improvement of vulnerability management and other application security programs.
- Own efforts to reduce mean time to remediate across the vulnerability backlog.
- Build scalable automation and tooling for vulnerability detection and response across cloud, firmware/IoT, and corporate systems.
- Set technical and architectural direction and translate strategic priorities into execution plans.
- Drive remediation by partnering with engineering teams and providing actionable security guidance.
- Mentor engineers and serve as a technical authority on secure design and remediation practices.
- Communicate risk and remediation tradeoffs to engineering leadership.
- Participate in investigations involving high-profile vulnerabilities and support critical vulnerability response on call.
Requirements
- 10+ years of relevant cloud engineering or security engineering experience, including hands-on vulnerability management across a broad, multi-product enterprise environment.
- Proficiency in Go, Python, and JavaScript.
- Ability to independently set technical and architectural direction for a security program and drive remediation without direct authority.
- Significant experience with vulnerability management tooling such as Wiz and Semgrep.
- Deep familiarity with CVSS and EPSS vulnerability scoring frameworks.
- Strong AWS cloud services background.
- Deep understanding of Static Application Security Testing, Dynamic Application Security Testing, and Software Composition Analysis.
- Hands-on use of AI/LLM tooling for security workflows and ability to discuss AI’s impact on the threat landscape.
- Experience with C/C++ for firmware and embedded systems is preferred.
- Experience with cloud-native or AI-forward companies, security automation platforms such as Tines, serverless frameworks such as AWS Lambda, CI/CD vulnerability integration, SaaS and corporate IT security, FedRAMP environments, or AI security copilots/agents is preferred.
Benefits
- Remote position with stated geographic/timezone eligibility and no relocation assistance.
- Flexible employee-led remote working model with office access where applicable.
- Annual base salary of £138,800—£173,500 GBP, plus performance-based bonus or variable pay and eligible equity.
- Professional development stipend.
- Comprehensive health and parental leave plans.
About Samsara
Samsara (NYSE: IOT) builds with the operators who keep the world moving. Working alongside the drivers, mechanics, dispatchers, and crews behind the world's most complex operations, Samsara turns what they know into technology that makes their work safer and more efficient. Tens of thousands of organizations rely on Samsara across transportation, construction, logistics, manufacturing, field services, government, and more. Built with operators, for operators.