2 months ago
Remote, United KingdomStaff+
Responsibilities
- Lead the strategy, operation, and continuous improvement of vulnerability management and other application security programs.
- Own efforts to reduce mean time to remediate across the vulnerability backlog.
- Build scalable automation and tooling for vulnerability detection and response across cloud, firmware/IoT, and corporate systems.
- Set technical and architectural direction and translate strategic priorities into execution plans.
- Drive remediation by partnering with engineering teams and providing actionable security guidance.
- Mentor engineers and serve as a technical authority on secure design and remediation practices.
- Communicate risk and remediation tradeoffs to engineering leadership.
- Participate in investigations involving high-profile vulnerabilities and support critical vulnerability response on call.
Requirements
- 10+ years of relevant cloud engineering or security engineering experience, including hands-on vulnerability management across a broad, multi-product enterprise environment.
- Proficiency in Go, Python, and JavaScript.
- Ability to independently set technical and architectural direction for a security program and drive remediation without direct authority.
- Significant experience with vulnerability management tooling such as Wiz and Semgrep.
- Deep familiarity with CVSS and EPSS vulnerability scoring frameworks.
- Strong AWS cloud services background.
- Deep understanding of Static Application Security Testing, Dynamic Application Security Testing, and Software Composition Analysis.
- Hands-on use of AI/LLM tooling for security workflows and ability to discuss AI’s impact on the threat landscape.
- Experience with C/C++ for firmware and embedded systems is preferred.
- Experience with cloud-native or AI-forward companies, security automation platforms such as Tines, serverless frameworks such as AWS Lambda, CI/CD vulnerability integration, SaaS and corporate IT security, FedRAMP environments, or AI security copilots/agents is preferred.
Benefits
- Remote position with stated geographic/timezone eligibility and no relocation assistance.
- Flexible employee-led remote working model with office access where applicable.
- Annual base salary of £138,800—£173,500 GBP, plus performance-based bonus or variable pay and eligible equity.
- Professional development stipend.
- Comprehensive health and parental leave plans.
About Samsara
Samsara builds a Connected Operations Cloud that uses IoT hardware and software to help fleets and other physical-operations organizations monitor vehicles, assets, and worksites. Its platform spans video-based driver safety, vehicle telematics, equipment monitoring, and mobile workflows, sold as subscriptions with accompanying devices. Founded in 2015 and headquartered in San Francisco, Samsara is a public company on the NYSE (ticker: IOT) serving transportation, construction, manufacturing, field services, and government.