Staff Offensive Security Engineer

New

SamsaraIoT, Software

Remote - UK, central or eastern timezonesFull-TimeStaff

Salary£138,800 — £173,500 GBP

Apply NowOpens the employer's application page

Job Details

10+ years of relevant experience as a cloud engineer or security engineer.
Hands-on vulnerability management across a broad, multi-product enterprise environment.
Proficiency in Go, Python, and JavaScript.
Demonstrated ability to independently set technical and architectural direction for a security program.
Significant experience with modern vulnerability management tooling (e.g., Wiz, Semgrep).
Deep familiarity with vulnerability scoring frameworks such as CVSS and EPSS.
Strong AWS cloud services background.
Deep understanding of Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).
Hands-on use of AI/LLM tooling in security workflows.
Must be based in central or eastern timezones.

Lead the ongoing strategy, operation, and continuous improvement of Samsara's vulnerability management program.
Own and drive down mean time to remediate (MTTR) across the vulnerability backlog.
Build and champion automation and tooling that scale vulnerability detection and response across cloud, firmware/IoT, and corporate systems.
Set technical and architectural direction for the program, translating leadership's strategic priorities into a concrete execution plan.
Drive remediation by building trust with engineering teams and providing clear, actionable guidance.
Mentor and level up other engineers on secure design and remediation practices.
Communicate risk and remediation tradeoffs to engineering leadership.
Participate in security incident investigations involving high-profile vulnerabilities.
Support critical vulnerability response through an on-call rotation.

View Full Description & ApplyYou'll be redirected to the employer's site