4 hours ago
Base Salary
$165k - $295k/yr
Responsibilities
- Lead the strategy, operation, and continuous improvement of vulnerability management and other application security programs.
- Drive down mean time to remediate across the vulnerability backlog and build scalable automation for vulnerability detection and response.
- Set technical and architectural direction, translate strategic priorities into execution plans, and drive remediation across engineering teams.
- Mentor engineers, provide secure-design and remediation guidance, and communicate risk and remediation tradeoffs to engineering leadership.
- Participate in high-profile vulnerability investigations and provide regular on-call support for critical vulnerability response.
Requirements
- 10+ years of relevant cloud or security engineering experience, including hands-on vulnerability management across broad multi-product enterprise environments.
- Proficiency in Go, Python, and JavaScript.
- Ability to independently set technical and architectural direction for security programs and drive remediation without direct authority over fixing teams.
- Significant experience with vulnerability management tooling such as Wiz and Semgrep, plus deep familiarity with CVSS and EPSS.
- Strong AWS cloud services experience and deep understanding of SAST, DAST, and SCA.
- Hands-on use of AI/LLM tooling for security workflows and credibility discussing AI’s effect on the threat landscape and security tooling.
- Preferred qualifications include C/C++ firmware experience, cloud-native or AI-forward company experience, Tines, AWS Lambda, CI/CD vulnerability-management integrations, SaaS/firmware/corporate IT security experience, FedRAMP experience, and security AI copilot or agent development.
Benefits
- Remote position open to candidates residing in the US, with a flexible employee-led remote model.
- Annual base salary range of $165,200—$295,000 USD, plus eligibility for an initial RSU grant and ongoing performance-based refresh opportunities.
- Performance-based bonus or variable pay, equity eligibility, professional development stipend, comprehensive health and parental leave plans, and other total-rewards benefits.
- Flexible access to offices where applicable and reasonable accommodation support.
About Samsara
Samsara builds a Connected Operations Cloud that uses IoT hardware and software to help fleets and other physical-operations organizations monitor vehicles, assets, and worksites. Its platform spans video-based driver safety, vehicle telematics, equipment monitoring, and mobile workflows, sold as subscriptions with accompanying devices. Founded in 2015 and headquartered in San Francisco, Samsara is a public company on the NYSE (ticker: IOT) serving transportation, construction, manufacturing, field services, and government.